Description
doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via (1) shell metacharacters in the eping_count parameter or (2) restricted shell metacharacters such as ">" and "&" in the eping_host parameter, which is not handled by the validation function.
Remediation
References
Related Vulnerabilities
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4572)
WordPress Plugin Admin Custom Login Cross-Site Scripting (2.5.3.1)
Ampache Improper Access Control Vulnerability (CVE-2021-21399)
GlassFish CVE-2017-3247 Vulnerability (CVE-2017-3247)
WordPress Plugin Preview E-mails for WooCommerce Cross-Site Scripting (1.6.8)