CVE-2006-2548

CVE-2006-2548 describes a critical arbitrary code execution vulnerability affecting Prodder and perlpodder versions prior to 0.5. Attackers can exploit this by injecting shell metacharacters into the URL of a podcast, which are then executed when the application runs wget. This vulnerability carries a CVSS score of 7.5, indicating high severity with network-based exploitation, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit (EDB-27902) is publicly available, though there is no evidence of active exploitation or significant community discussion.