Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Futomi CGI Cafe MP Form Mail CGI eCommerce Arbitrary Code Execution Vulnerability

Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows is a Windows-based CGI for sending emails from Web forms by Futomi Japan. A security vulnerability exists in Futomi CGI Cafe MP Form Mail CGI eCommerce on Windows platform prior to version 2.0.12. A remote attacker can exploit the vulnerabilit...

Cross-Site-Scripting (XSS) in tcllib's html::textarea

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Cross-Site-Scripting XSS in tcllib's html::textarea Release Date: 26 February 2015 Last Modified: 26 February 2015 Author: Ben Fuhrmannek ben.fuhrmannekatsektioneins.de Application: tcllib - Tcl standard library - versions 1.0....

CVE-2015-0898

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

CVE-2015-0898

The CVE concerns Futomi CGI Cafe MP Form Mail CGI eCommerce edition running on Windows. The vulnerability allows a remote attacker to execute arbitrary Perl code due to an injection flaw in the CGI eCommerce implementation, affecting version 2.0.11 and earlier. The impact is remote code execution...

CVE-2015-0898

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

CVE-2015-0898: Improper Control of Generation of Code

futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on Windows allows remote attackers to execute arbitrary Perl code via unspecified vectors...

PT-2015-4953

Name of the Vulnerable Software and Affected Versions futomi CGI Cafe MP Form Mail CGI eCommerce versions prior to 2.0.12 Description The issue allows remote attackers to execute arbitrary Perl code. Recommendations For versions prior to 2.0.12, update to version 2.0.12 or later to resolve the...

JVN#39175666: MP Form Mail CGI eCommerce edition vulnerable to code injection

MP Form Mail CGI eCommerce edition provided by futomi Co., Ltd. is a CGI used to send mail from a web form. MP Form Mail CGI eCommerce edition contains a code injection vulnerability. Impact Arbitrary Perl code may be executed on the server where it resides. Solution Update the software Update to...

AWStats Plugin Multiple Remote Command Execution (CVE-2005-0363)

A command execution vulnerability has been reported in AWStats. The vulnerability is due to failing of AWStats CGI script to properly sanitize user provided parameters. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the target system...

[SECURITY] Fedora 21 Update: 389-admin-1.1.38-1.fc21

389 Administration Server is an HTTP agent that provides management features for 389 Directory Server. It provides some management web apps that can be used through a web browser. It provides the authentication, access cont rol, and CGI utilities used by the console...

Cross site scripting

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0893

Maroyaka Relay Novel (a CGI script for posting text on websites) is affected by a persistent XSS vulnerability that allows remote attackers to execute arbitrary scripts in a victim’s browser. The issue is tied to Maroyaka CGI Maroyaka Relay Novel, with affected versions listed as ver1.20c and ear...

CVE-2015-0892

Maroyaka Image Album (CGI) is affected by a cross-site scripting (XSS) vulnerability. Reports from JVN/JVNDB and CNVD/NVD indicate that vulnerable versions are Maroyaka Image Album ver1.00 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML that can be ex...

CVE-2015-0891

The connected CVE details show a persistent cross-site scripting (XSS) vulnerability in Maroyaka Simple Board (Maroyaka CGI) CGI script. Affected: Maroyaka Simple Board versions up to ver1.10 and earlier. Impact: remote attacker can inject arbitrary web script or HTML, leading to arbitrary script...

CVE-2015-0893: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Relay Novel allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-4949

Name of the Vulnerable Software and Affected Versions Maroyaka CGI Maroyaka Relay Novel affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to...

Maroyaka CGI Maroyaka Relay Novel Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Relay Novel is a CGI script for publishing text to websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Relay Novel. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2015-0892: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Maroyaka Image Album vulnerable to cross-site scripting

Overview Maroyaka Image Album provided by Maroyaka CGI is a CGI script for placing image files within a website. Maroyaka Image Album contains a cross-site scripting vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...