debian/sword vulnerabilities

Latest debian/sword CVEs

Newest publication first

1. CVE-2008-0932 diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

   Published 2008-02-25

   High·CVSS 7.5 EPSS 2.9%

   diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.

2. DSA-1508-1 sword - arbirary shell command execution

   Published 2008-02-25

   Unknown

3. CVE-2005-0015 diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

   Published 2005-01-29

   High·CVSS 7.5 EPSS 2.3%

   diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

4. DSA-650-1 sword - missing input sanitising

   Published 2005-01-20

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.