CVE-2006-5925

Links/Elinks <1.00pre12-0.9.2 - RCE

Title source: llm

Description

Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Teemu Salmela · htmlremotelinux
https://www.exploit-db.com/exploits/29033
exploitdb WORKING POC VERIFIED
by Teemu Salmela · htmlremotemultiple
https://www.exploit-db.com/exploits/2784

Scores

EPSS 0.3321
EPSS Percentile 96.9%

Details

Status published
Products (2)
elinks/elinks 0.9.2
links/links 1.00pre12
Published Nov 15, 2006
Tracked Since Feb 18, 2026