Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Perlbot | Perlbot | 1.9.2 (including) | 1.9.2 (including) |