CVE-2002-1660

calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.

Date published : 2005-05-10

http://www.securityfocus.com/bid/5820

http://www.securiteam.com/exploits/5QP0P158AC.html