3 ms·

http://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-6117/opec-1/Apache-Struts.html http://www.cvedetails.com/vulnerability-list/vendor_id-45/pr

by kevinr 12y ago

http://www.cvedetails.com/vulnerability-list/vendor_id-45/product_id-6117/opec-1/Apache-Struts.html http://www.cvedetails.com/vulnerability-list/vendor_id-45/pr... That's 12 just in one of the more popular Java web frameworks. RCE is possible in any language.

MichaelGG 12y ago
Those appear to be all exec/eval type bugs. Yes, if you do "eval($querystring)" you've got a problem in any language, including C.