ezsystems/ezscriptmonitor — pull request #9 by jdespatis (2011-12-02 15:07:23+00:00)
Title: Protection against too long command to avoid bad code injection in shell

It's possible to invoke ezscriptmonitor with a big big command line, but if the command is longer than 2000, it will be silently cut by the database (length for this command has been increased from 255 to 2000 with https://github.com/ezsystems/ezscriptmonitor/pull/8, but whatever the limit is, even huge, protection is required)

When the cronjob executes this command, it will execute a command, that has been cut just after 2000 chars...

So with a command like "./prog --command='echo "[massive spaces]"; rm -rf /' --scriptid=4"...
Well... you know... :)