Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Prodder/perlpodder 播客URL 输入验证漏洞
Vulnerability Description
Prodder是用Perl编写的基于命令行的Podcast客户端。 Prodder的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞在客户端机器上执行任意命令。 在使用prodder获取媒体文件索引时，prodder会从服务器所提供的XML文件获取媒体文件的URL，然后使用wget获取文件。源码类似于： [...] 446 # Actually get the file 447 my $wget_cmd = "wget -qc -a '$conf{'errorfile'}' " 448 . "--trie
CVSS Information
N/A
Vulnerability Type
N/A