| Package | Affected versions | Patched versions |
|---|---|---|
| perlpodder | = 0.2= 0.3≤ 0.4 |
perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed when saving the URL to a log file. NOTE: the wget vector is already covered by CVE-2006-2548.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free