CVE-2017-16926

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.

CVE-2017-16926

Ohcount 3.0.0 is prone to a command injection via specially crafted fi ...

GHSA-q7qc-2g57-fg48

Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing a source tree for Ohcount processing) to execute arbitrary code as the user running Ohcount.

BDU:2018-00124

Уязвимость программного средства для подсчета строк исходного кода Ohcount, связанная с отсутствием мер по очистке входных данных, позволяющая нарушителю выполнить произвольный код