CVE-2006-6678
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execu…
Published: 2006-12-21 · CVSS: Unscored
The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7