CVE ID:	CVE-2008-0932
Description:	diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter.
Test IDs:	1.3.6.1.4.1.25623.1.0.60509   1.3.6.1.4.1.25623.1.0.60442   1.3.6.1.4.1.25623.1.0.860758   1.3.6.1.4.1.25623.1.0.860567
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-0932 BugTraq ID: 27874 http://www.securityfocus.com/bid/27874 BugTraq ID: 27987 http://www.securityfocus.com/bid/27987 Debian Security Information: DSA-1508 (Google Search) http://www.debian.org/security/2008/dsa-1508 https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00769.html https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00806.html http://security.gentoo.org/glsa/glsa-200803-06.xml http://secunia.com/advisories/25400 http://secunia.com/advisories/29012 http://secunia.com/advisories/29115 http://secunia.com/advisories/29181 http://www.vupen.com/english/advisories/2008/0670/references