CWE-78 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-78/ Sun, 26 Feb 2023 09:11:53 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-78 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-78/ 32 32 CVE-2008-7158 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7158/ Sun, 26 Feb 2023 09:11:53 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7158/ Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information.

The post CVE-2008-7158 appeared first on CVE Vulnerability.

]]> Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl. NOTE: some of these details are obtained from third party information.

The post CVE-2008-7158 appeared first on CVE Vulnerability.

]]> CVE-2008-7125 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7125/ Sun, 26 Feb 2023 09:11:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7125/ pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information.

The post CVE-2008-7125 appeared first on CVE Vulnerability.

]]> pphoto in Ariadne before 2.6 allows remote authenticated users with certain privileges to execute arbitrary shell commands via vectors related to PINP programs and the annotate command. NOTE: some of these details are obtained from third party information.

The post CVE-2008-7125 appeared first on CVE Vulnerability.

]]> CVE-2008-6669 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6669/ Sun, 26 Feb 2023 09:11:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6669/ viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.

The post CVE-2008-6669 appeared first on CVE Vulnerability.

]]> viewrq.php in nweb2fax 0.2.7 and earlier allows remote attackers to execute arbitrary code via shell metacharacters in the var_filename parameter in a (1) tif or (2) pdf format action.

The post CVE-2008-6669 appeared first on CVE Vulnerability.

]]> CVE-2008-6554 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6554/ Sun, 26 Feb 2023 09:11:35 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6554/ cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

The post CVE-2008-6554 appeared first on CVE Vulnerability.

]]> cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

The post CVE-2008-6554 appeared first on CVE Vulnerability.

]]> CVE-2008-6235 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6235/ Sun, 26 Feb 2023 09:11:25 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6235/ The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) “D” (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.

The post CVE-2008-6235 appeared first on CVE Vulnerability.

]]> The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) “D” (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.

The post CVE-2008-6235 appeared first on CVE Vulnerability.

]]> CVE-2008-5718 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5718/ Sun, 26 Feb 2023 09:11:09 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5718/ The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.

The post CVE-2008-5718 appeared first on CVE Vulnerability.

]]> The papd daemon in Netatalk before 2.0.4-beta2, when using certain variables in a pipe command for the print file, allows remote attackers to execute arbitrary commands via shell metacharacters in a print request, as demonstrated using a crafted Title.

The post CVE-2008-5718 appeared first on CVE Vulnerability.

]]> CVE-2008-5516 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5516/ Sun, 26 Feb 2023 09:11:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5516/ The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.

The post CVE-2008-5516 appeared first on CVE Vulnerability.

]]> The web interface in git (gitweb) 1.5.x before 1.5.5 allows remote attackers to execute arbitrary commands via shell metacharacters related to git_search.

The post CVE-2008-5516 appeared first on CVE Vulnerability.

]]> CVE-2008-4796 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4796/ Sun, 26 Feb 2023 09:10:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4796/ The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.

The post CVE-2008-4796 appeared first on CVE Vulnerability.

]]> The _httpsrequest function (Snoopy/Snoopy.class.php) in Snoopy 1.2.3 and earlier, as used in (1) ampache, (2) libphp-snoopy, (3) mahara, (4) mediamate, (5) opendb, (6) pixelpost, and possibly other products, allows remote attackers to execute arbitrary commands via shell metacharacters in https URLs.

The post CVE-2008-4796 appeared first on CVE Vulnerability.

]]> CVE-2008-4304 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4304/ Sun, 26 Feb 2023 09:10:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4304/ general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells.

The post CVE-2008-4304 appeared first on CVE Vulnerability.

]]> general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a base64-encoded string value, which may impose constraints on injection for typical shells.

The post CVE-2008-4304 appeared first on CVE Vulnerability.

]]> CVE-2008-3074 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3074/ Sun, 26 Feb 2023 09:09:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3074/ The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the “!” (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin […]

The post CVE-2008-3074 appeared first on CVE Vulnerability.

]]> The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the “!” (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

The post CVE-2008-3074 appeared first on CVE Vulnerability.

]]>