Kdirstat Project : Security Vulnerabilities, CVEs,
kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a ' (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.
Max CVSS
6.8
EPSS Score
1.81%
Published
2014-08-26
Updated
2018-10-30
kcleanup.cpp in KDirStat 2.7.0 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a " (double quote) character in the directory name, a different vulnerability than CVE-2014-2528.
Max CVSS
6.8
EPSS Score
2.24%
Published
2014-08-26
Updated
2018-10-30
2 vulnerabilities found