| Package | Affected versions | Patched versions |
|---|---|---|
| vim | = 7.0= 7.1 |
The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free