Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GKrellM Newsticker远程命令执行漏洞
Vulnerability Description
gkrellm-newsticker是gkrellm系统监视程序的插件。 newsticker在查看'ticker'标题时对SHELL元字符缺少正确过滤，远程攻击者可以利用这个漏洞构建恶意标题，诱使用户访问，可能以用户进程权限在系统上执行任意命令。 当用户使用newsticker点击URI提供的'ticker'标题时，由于软件对特殊SHELL字符缺少充分过滤，攻击者提供恶意的标题，当用户点击时，可在客户端机器上执行任意SHELL命令。
CVSS Information
N/A
Vulnerability Type
N/A