CVE-2005-1960

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The getemails function in C.J. Steele Tattle allows remote attackers to execute arbitrary commands via shell metacharacters in certain log entries, as demonstrated using shell metacharacters in an FTP username.

Published 2005-06-08. Last modified 2026-06-16.