Security Advisory
CVE-2014-2528
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
kcleanup.cpp in KDirStat 2.7.3 does not properly quote strings when deleting a directory, which allows remote attackers to execute arbitrary commands via a (single quote) character in the directory name, a different vulnerability than CVE-2014-2527.