| Package | Affected versions | Patched versions |
|---|---|---|
| kdirstat | = 2.7.3 |
kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free