CVEvulnerability

CVE-2010-3313

7.5 HIGH Published 2010-09-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-09-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php in EGroupware 1.4.001+.002; 1.6.001+.002 and possibly other versions before 1.6.003; and EPL 9.1 before 9.1.20100309 and 9.2 before 9.2.20100309; allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) aspell_path or (2) spellchecker_lang parameters.

Affected configurations

• egroupware egroupware 1.4.001 • egroupware egroupware 1.4.001\+.002 • egroupware egroupware 1.4.002 • egroupware egroupware 1.6.001 • egroupware egroupware 1.6.001\+.002 • egroupware egroupware 1.6.002 • egroupware egroupware 9.1 • egroupware egroupware 9.2

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References