| Package | Affected versions | Patched versions |
|---|---|---|
| perlpodder | = 0.2= 0.3≤ 0.4 | |
| prodder | = 0.3≤ 0.4 |
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free