OS Command Injection

tkeasygui is vulnerable to OS Command Injection. The vulnerability is due to settings that construct messages from external sources without validation, allowing attackers to supply crafted input e.g., shell metacharacters to execute arbitrary OS commands...