Vulnerabilities > Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1660 OS Command Injection vulnerability in Jelsoft Vbulletin
calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.
network
low complexity
jelsoft CWE-78
7.5
2001-12-31 CVE-2001-1583 OS Command Injection vulnerability in SUN Sunos
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program.
network
low complexity
sun CWE-78
critical
10.0