aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable).
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-08-23T04:00:00
Updated: 2024-08-07T22:45:02.069Z
Reserved: 2005-08-23T00:00:00
Link: CVE-2005-2682
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-08-23T04:00:00.000
Modified: 2024-11-21T00:00:08.497
Link: CVE-2005-2682
Redhat
No data.