CVE-2012-5347: Undefined Security Weakness

TinyWebGallery 1.8.3 allows remote attackers to execute arbitrary code via shell metacharacters in the command parameter to 1 inc/filefunctions.inc or 2 info.php...

CVE-2010-3890: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do...

Cross site scripting

Cross-site scripting XSS vulnerability in mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter...

CVE-2008-7213: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mambots/editors/mostlyce/jscripts/tinymce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter...

gmanedit多个缓冲区溢出漏洞

BUGTRAQ ID: 31040 Gmanedit是类似于HTML编辑器的GNOME用户手册编辑器。 Gmanedit中存在多个缓冲区溢出漏洞，在启动向导后如果在手册的标题或名称中输入了超长行的话，或提供了超长的COMMAND=参数，或对编辑器提供了200kb的文件，就可以触发这些溢出，导致执行任意代码。 以下是callbacks.c文件中的有漏洞代码段： 638 gchar command50,datos; 639 gint exitstatus; 640 641 / I read conf file /.gmaneditrc / 642 643 strcpytemp,...

CVE-2008-2841

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...

CVE-2007-5725

Multiple cross-site scripting XSS vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via 1 the email parameter to index.php; or the command parameter to index.php in 2 the default action for the home page, 3 a currencies action, or 4 a basket action...

CVE-2002-2348

Cross-site scripting XSS vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter...

CVE-2002-2348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter...

CVE-2007-2020

Unspecified vulnerability in administration.php in xodagallery allows remote attackers to execute arbitrary code via the cmd parameter. NOTE: CVE disputes this vulnerability because administration.php does not use the cmd parameter for inclusion...

CVE-2007-1985

Multiple PHP remote file inclusion vulnerabilities in phpexplorator.php in phpexplorator 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd or 2 langpath parameter...

CVE-2006-3320: Undefined Security Weakness

Cross-site scripting XSS vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter...

CVE-2006-1634: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter...

win32 WinExec() Command Parameter 104+ bytes

Exploit for win32 platform in category shellcode ============================================ win32 WinExec Command Parameter 104+ bytes ============================================ ; ; relocateable dynamic runtime assembly code example using hash lookup ; ; WinExec with ExitThread ; 104 bytes ; ...

CVE-2006-0325

Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter...

CVE-2002-2104: Undefined Security Weakness

graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function...

CVE-2003-1038: Undefined Security Weakness

The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow

Oracle 8i - TNS Listener Local Command Parameter Buffer Overflow / source: https://www.securityfocus.com/bid/4413/info Oracle 8i is a powerful relational database product. It is available for Windows, Linux, and a wide range of Unix operating systems. A vulnerability has been reported with some...