gkrellm-newsticker gkrellm plugin before 0.3-3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the ticker title of a URI.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Gkrellm_newsticker | Gkrellm_newsticker | 0.3 (including) | 0.3 (including) |