← Database

CVE-2005-2682

HIGH CVSS: 7.5 Published: 2005-08-23 Modified: 2026-06-16

Description

aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable).

Affected Platforms

Dtlink Areaedit

Weakness Type

NVD-CWE-Other

References