Description

The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.

Remediation

References

CVE-2005-1949

Related Vulnerabilities

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4223)

OpenSSL Cryptographic Issues Vulnerability (CVE-2011-4576)

WordPress Plugin WP Affiliate Platform Multiple Vulnerabilities (6.3.9)

WordPress Plugin WP Mail Log Cross-Site Scripting (1.1.1)

WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login SQL Injection (5.0.2.1)

Severity

High

Classification

CVE-2005-1949

Tags

Missing Update Known Vulnerabilities