CNNVD-202508-2248 Information

CNNVD ID

CNNVD-202508-2248

CVE-2025-9174

  • CNNVD Published: 2025-08-19

Description (Chinese)

Shell Script Compiler是Md Jahidul Hamid个人开发者的一个Shell脚本编译器。 Shell Script Compiler 4.0.3及之前版本存在命令注入漏洞,该漏洞源于组件Filename Handler中文件src/shc.c函数make存在os命令注入。

Description (English)

Shell Script Compiler is a Shell script compiler for the personal developer of Md Jahidul Hamid. There is a command-injection loophole in Shell Script Company 4.0.3 and previous versions, which arises from the src/shc.c function in component Filename Handler. Make-injected Os command.

Hazard Level

High

Vulnerability Type

命令注入

Affected Vendor

个人开发者

Published

2025-08-19

Last Modified

2026-02-24

References

https://vuldb.com/?ctiid.320555 https://magnificent-dill-351.notion.site/Command-Execution-in-shc-4-0-3-249c693918ed8040abe3e636c7f18c96 https://vuldb.com/?id.320555 https://vuldb.com/?submit.630742 https://nvd.nist.gov/vuln/detail/CVE-2025-9174

Share on: