CVE-2005-0015 diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| crosswire bible society sword | = 1.5.7a | No fix listed |
| debian/sword(Debian:12) | < 1.5.7-7 | 1.5.7-7 |
| debian/sword(Debian:13) | < 1.5.7-7 | 1.5.7-7 |
| debian/sword(Debian:14) | < 1.5.7-7 | 1.5.7-7 |
References
- 13897 third-party-advisory
- 13941 third-party-advisory
- 1012955 vdb-entry
- DSA-650 patch vendor-advisory
- 12320 vdb-entry
- sword-diatheke-command-execution(18997) vdb-entry
- Debian Security Tracker CVE-2005-0015 vendor-advisory
- bugs.debian.org issue-tracking