aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable).
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2005-2683 | aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable). |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T22:45:02.069Z
Reserved: 2005-08-23T00:00:00
Link: CVE-2005-2682
No data.
Status : Deferred
Published: 2005-08-23T04:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2005-2682
No data.
OpenCVE Enrichment
No data.
EUVD