Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Perlbot |
Perlbot |
1.9.2 (including) |
1.9.2 (including) |
References