Command injection vulnerability solved

http://trac-hacks.org/ticket/11465