Unscored CVE-2002-1843 EUVD-2002-1822GHSA-95xg-r294-q72m

Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (…

Published Jun 28, 2005 · Updated Sep 17, 2024 · Assigned by mitre

Description

Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm.

References

perlbot-filename-command-execution(10404) vdb-entry
6009 vdb-entry
6008 vdb-entry
perlbot-text-command-execution(10403) vdb-entry
20021018 SCAN Associates Advisory: perlbot 1.9.2 - Remote Command Execution mailing-list