CVE-2010-0011
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.
Date published : 2010-02-25
http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047