CVE-2004-2284

The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...

CVE-2004-2275

The CVE-2004-2275 entry concerns i-mall.cgi in I-Mall Commerce, where remote command execution is possible via shell metacharacters in the p parameter. The vulnerability stems from insufficient input sanitization in i-mall.cgi, enabling an attacker to pass arbitrary shell commands to the remote s...

CVE-2004-2284: Undefined Security Weakness

The readlistfromfile function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument...

CVE-2004-2275: Undefined Security Weakness

i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter...

CVE-2005-2290

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-2290: Undefined Security Weakness

wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...

CVE-2005-2277

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2005-2277: Undefined Security Weakness

Bluetooth FTP client BTFTP in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command...

CVE-2002-1993

The CVE-2002-1993 entry affects WebBBS 4 and 5.0, where webbbs_post.pl fails to sanitize shell metacharacters in the followup parameter, enabling remote command execution. The underlying issue is improper handling of shell commands, allowing an attacker to run arbitrary commands on the affected s...

CVE-2002-2047

The CVE-2002-2047 entry describes a vulnerability in the file preview feature of Sketch (version 0.6.12 and earlier). The issue is that remote attackers can execute arbitrary commands by supplying shell metacharacters in the filename of an encapsulated Postscript (EPS) file, exploiting the previe...

CVE-2002-2047

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...

CVE-2002-2047

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...

CVE-2002-1993: Undefined Security Weakness

webbbspost.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter...

CVE-2002-2047: Undefined Security Weakness

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript EPS file...

CVE-2005-2259

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including 1 USANet Shopping Mall Software, 2 Domain Name Auction Software, 3 Standard Classified Ads Software, and 4 MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell...

CVE-2005-2259: Undefined Security Weakness

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including 1 USANet Shopping Mall Software, 2 Domain Name Auction Software, 3 Standard Classified Ads Software, and 4 MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell...

CVE-2005-2205

The CVE-2005-2205 entry describes a vulnerability in the ReadLog function of kaiseki.cgi in pngren, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the query string. This is tied to a web-facing CGI component (kg ren/pngren) that processes input in a way...

CVE-2005-2178

probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any...

CVE-2005-2205: Undefined Security Weakness

The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

CVE-2005-2178

probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. NOTE: it is unclear which product or vendor this program is associated with, if any...