Security Advisory
CVE-2010-0011
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code.