Vulnerability in Avengers News System

CVE-2002-0306

ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.

EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.

Affected products

Avengers_news_system — versions 2.01, 2.11
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)