CVE-2006-2548

no score yetEPSS 13%

Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2006-05-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

perlpodder:perlpodder
prodder:prodder

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html
http://secunia.com/advisories/20208
http://secunia.com/advisories/20238
http://securityreason.com/securityalert/942
http://sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643

Check your stack JSON