CVE-2006-5925: Elinks

High severity, CVSS 7.5. EPSS: 8.3% chance of exploitation in the next 30 days.

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

Affected products

  • Elinks Elinks: version 0.9.2 only
  • Links Links: version 1.00pre12 only

Published 2006-11-15. Last modified 2026-06-16.