Description

The eTrace_validaddr function in eTrace plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the etrace_host parameter.

Remediation

References

CVE-2005-1966

Related Vulnerabilities

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Arbitrary File Upload (2.2.4)

WordPress Plugin Simba Plugin Updates Manager Multiple Cross-Site Request Forgery Vulnerabilities (1.6.16)

Drupal Core 7.x Directory Traversal (7.0 - 7.81)

Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-12626)

Joomla Improper Authentication Vulnerability (CVE-2017-16634)

Severity

High

Classification

CVE-2005-1966

Tags

Missing Update Known Vulnerabilities