Web Terra 1.1 - books.cgi Remote Command Execution

Web Terra 1.1 - books.cgi Remote Command Execution + Remote Comand Execution on books.cgi Web Terra v. 1.1 + Date: 21/05/2014 + CWE number: CWE-78 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Tested on: Windows 7 and Linux + Vendor Homepage:...

Web Terra 1.1 Remote Command Execution

Remote Comand Execution on books.cgi Web Terra v. 1.1 + Date: 21/05/2014 + CWE number: CWE-78 + Risk: High + Author: Felipe Andrian Peixoto + Contact: [email protected] + Tested on: Windows 7 and Linux + Vendor Homepage: http://www2.inforyoma.or.jp/terra + Vulnerable File: books.cgi +...

Apache Httpd < 1.3-never : mod_proxy reverse proxy exposure

An exposure was found when using modproxy in reverse proxy mode. In certain configurations using RewriteRule with proxy flag or ProxyPassMatch, a remote attacker could cause the reverse proxy to connect to an arbitrary server, possibly disclosing sensitive information from internal web servers no...