The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page, which is not properly handled by the fetch function.
CVSS v2.0 Score
7.5
/ 10.0
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Information
- Published
- 27 oct. 2005
- Updated
- 16 avr. 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
snoopy snoopy
Versions : 1.2
Weaknesses (CWE)
CWE-20
References (34)
- http://secunia.com/advisories/17455Vendor Advisory
- http://secunia.com/advisories/17779Vendor Advisory
- http://secunia.com/advisories/17887Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2202Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2335Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2727Vendor Advisory
- + 19 more references on NVD
Similar CVEs
Other vulnerabilities of type CWE-20
Loading…
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.