2019 matches found
PT-2013-4441
Name of the Vulnerable Software and Affected Versions GroundWork Monitor Enterprise version 6.7.0 Description The issue is related to the improper restriction of XML content in the Performance component of GroundWork Monitor Enterprise. This allows remote attackers to execute arbitrary commands b...
CVE-2013-0124: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the administration interface in ASKIA askiaweb allow remote attackers to inject arbitrary web script or HTML via the 1 Number or 2 UpdatePage parameter to WebProd/cgi-bin/AskiaExt.dll...
PT-2013-2111
Name of the Vulnerable Software and Affected Versions ASKIA askiaweb affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administration interface. These vulnerabilities allow remote attackers to inject arbitrary web script or HTM...
VulnCheck KEV: CVE-2017-16959
The locale feature in cgi-bin/luci on TP-Link TL-WVR, TL-WAR, TL-ER, and TL-R devices allows remote authenticated users to test for the existence of arbitrary files by making an operation=write;locale=%0d request, and then making an operation=read request with a crafted Accept-Language HTTP heade...
CVE-2012-4443: Undefined Security Weakness
Monkey HTTP Daemon 0.9.3 uses a real UID of root and a real GID of root during execution of CGI scripts, which might allow local users to gain privileges by leveraging cgi-bin write access...
PT-2012-5404
Name of the Vulnerable Software and Affected Versions Monkey HTTP Daemon version 0.9.3 Description The issue allows local users to potentially gain privileges by exploiting cgi-bin write access during the execution of CGI scripts, as the software uses a real UID of root and a real GID of root...
CVE-2012-2104
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request...
CVE-2012-2104
CVE-2012-2104 concerns the Munin project: the CGI script cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which could allow a user‑assisted remote attacker to inject terminal emulator escape sequences and execute arbitrary commands or del...
CVE-2012-2104
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request...
CVE-2012-2104
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request...
PT-2012-3810
Name of the Vulnerable Software and Affected Versions Munin versions 2.x Description The issue allows user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request to the "cgi-bin/munin-cgi-graph"...
CVE-2012-2104: Improper Input Validation
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitrary files via a crafted HTTP request...
CVE-2012-4667
Multiple cross-site scripting XSS vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 virus, 3 source, or 4 user parameter to a clwarn.cgi, b clwarn.cgi.deDE, c clwarn.cgi.enEN, d clwarn.cgi.frFR, e clwarn.cgi.ptBR, or f...
CVE-2012-4667: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SquidClamav 5.x before 5.8 allow remote attackers to inject arbitrary web script or HTML via the 1 url, 2 virus, 3 source, or 4 user parameter to a clwarn.cgi, b clwarn.cgi.deDE, c clwarn.cgi.enEN, d clwarn.cgi.frFR, e clwarn.cgi.ptBR, or f...
PT-2012-4140
Name of the Vulnerable Software and Affected Versions Plixer Scrutinizer aka Dell SonicWALL Scrutinizer versions prior to 9.5.0 Description The issue concerns the lack of token authentication in the cgi-bin/admin.cgi endpoint of the web console, allowing remote attackers to add administrative...
PT-2012-3174
Name of the Vulnerable Software and Affected Versions Movable Type versions prior to 4.38 Movable Type versions 5.0x prior to 5.07 Movable Type versions 5.1x prior to 5.13 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the...
CVE-2012-1262: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in cgi-bin/mt/mt-wizard.cgi in Movable Type before 4.38, 5.0x before 5.07, and 5.1x before 5.13, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the dbuser parameter, a different vulnerability th...
CVE-2012-0902
AirTies Air 4450 1.1.2.18 allows remote attackers to cause a denial of service reboot via a direct request to cgi-bin/loader...
