Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

CVEs (6,175)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4673 1Apple 1Quicktime Apr 23, 2026 Oct 4, 2007 N/A· v4 N/A· v3 9.3 HIGH· v2 Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be rel...Show more Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045.Show less
CVE-2007-4891 1Microsoft 1Visual Studio Apr 23, 2026 Sep 14, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile method...Show more A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.Show less
CVE-2007-4560 1Clam Anti Virus 1Clamav Apr 23, 2026 Aug 28, 2007 N/A· v4 N/A· v3 7.6 HIGH· v2 clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of...Show more clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen call, involving the "recipient field of sendmail."Show less
CVE-2007-4041 2Microsoft Mozilla 2Firefox Internet Explorer Apr 23, 2026 Jul 27, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news,...Show more Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in a (1) mailto, (2) nntp, (3) news, (4) snews, or (5) telnet URI, a similar issue to CVE-2007-3670.Show less
CVE-2006-6427 1Xerox 1Workcentre Apr 23, 2026 Dec 10, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors i...Show more The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290.Show less
CVE-2006-0325 1Etomite 1Etomite Apr 16, 2026 Jan 20, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attacke...Show more Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter.Show less
CVE-2005-2368 1Vim Development Group 1Vim Apr 16, 2026 Jul 26, 2005 N/A· v4 N/A· v3 9.3 HIGH· v2 vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculati...Show more vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.Show less
CVE-2004-2732 1Netbilling 1Netbilling Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 4.3 MEDIUM· v2 nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.
CVE-2003-0041 3Mandrakesoft MitRedhat 4Kerberos Ftp Client LinuxMandrake Linux+1 more Apr 16, 2026 Feb 19, 2003 N/A· v4 N/A· v3 10.0 HIGH· v2 Kerberos FTP client allows remote FTP sites to execute arbitrary code via a pipe (\|) character in a filename that is retrieved by the client.
CVE-2002-1898 1Apple 1Terminal Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.2 HIGH· v2 Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
CVE-2002-1660 1Jelsoft 1Vbulletin Apr 16, 2026 Dec 31, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
CVE-2002-0061 1Apache 1Http Server Apr 16, 2026 Mar 21, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a \| pipe character) provided as arguments to batch (.bat) or .cmd scripts, whi...Show more Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a \| pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.Show less
CVE-2001-1583 1Sun 1Sunos Apr 16, 2026 Dec 31, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this mi...Show more lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.Show less
CVE-1999-0043 6Bsdi CalderaIsc+3 more 7Bsd Os Goah IntrasvGoah Networksv+4 more Apr 16, 2026 Dec 4, 1996 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
CVE-1999-0067 2Apache Ncsa 2Http Server Ncsa Httpd Apr 16, 2026 Mar 20, 1996 N/A· v4 N/A· v3 10.0 HIGH· v2 phf CGI program allows remote command execution through shell metacharacters.

Previous 1...305 306 307 308309