Description

The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.

Remediation

References

CVE-2005-1949

Related Vulnerabilities

Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-3352)

WordPress Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Vulnerability (CVE-2017-5493)

WordPress 6.2.x Shortcode Execution (6.2 - 6.2.1)

WordPress Plugin YITH WooCommerce Brands Add-On Security Bypass (1.3.6)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2213)

Severity

High

Classification

CVE-2005-1949

Tags

Missing Update Known Vulnerabilities