91 matches found
Debian DSA-138-1 : gallery - remote exploit
A problem was found in gallery a web-based photo album toolkit: it was possible to pass in the GALLERYBASEDIR variable remotely. This made it possible to execute commands under the uid of web-server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
CVE-2002-1412
CVE-2002-1412 affects Gallery (Gallery project photo album) prior to 1.3.1. Affected component is the GALLERY_BASEDIR handling in the Gallery codebase. The underlying issue allows local and possibly remote attackers to execute arbitrary code by supplying a modified GALLERY_BASEDIR that points to ...
CVE-2002-1412
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERYBASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script...
CVE-2003-1412
PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator GOsa 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to 1 3fax/1blocklists/index.php; 2 6departamentadmin/index.php, 3 5terminals/index.php, 4 4mailinglists/index.php, 5...
CVE-2001-1412
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument...
CVE-2001-1412
nidump on MacOS X before 10.3 allows local users to read the encrypted passwords from the password file by specifying passwd as a command line argument...
CVE-2001-1412
CVE-2001-1412 affects MacOS X before 10.3 via the nidump utility. Local users can read the encrypted passwords from the password file by supplying passwd as a command line argument, indicating a failure in input handling and access control for that utility. The vulnerability’s impact is limited t...
Immunity Canvas: GALLERY1_INCLUDE
Name| gallery1include ---|--- CVE| CVE-2002-1412 Exploit Pack| CANVAS Description| Gallery 1.2.5 = Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: GNU CVE Url: https://vulners.com/cve/CVE-2002-1412 CVE Name: CVE-2002-1412...
CVE-1999-1412
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service crash via a flood of HTTP GET requests to CGI programs, which generates a large number of processes...
CVE-1999-1412
CVE-1999-1412 describes a DoS risk from an interaction between MacOS X 1.0 and Apache HTTP server, where a flood of HTTP GET requests to CGI programs can spawn many processes on affected systems. Connected sources provide concrete details indicating the issue relates to the Apache httpd component...
