CVE-2006-2548
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code...
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
Exploit likelihood
What each source reports
NVD Score used
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
- Record
CVE-2006-2548- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
- Record
CVE-2006-2548- Updated
- 2026-11-02
EUVDEUVD-2006-2548 No score
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
- Record
EUVD-2006-2548- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p3wp-9777-5gw9 No score
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code...
Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
- Record
GHSA-p3wp-9777-5gw9- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Prodder 0.4 - Arbitrary Shell Command Execution | 2006-05-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2548 is a high vulnerability (CVSS 7.5) in Perlpodder, published May 23, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/26575
archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html
securityfocus.com/bid/18068
vupen.com/english/advisories/2006/1905
Show 9 moreShow less
redteam-pentesting.de/advisories/rt-sa-2006-002.php
osvdb.org/25690
secunia.com/advisories/20238
sourceforge.net/project/shownotes.php?release_id=418189&group_id=148643
securityreason.com/securityalert/942
nvd.nist.gov/vuln/detail/CVE-2006-2548
github.com/advisories/GHSA-p3wp-9777-5gw9