Philip Chinery's Guestbook 1.1 Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4566/info Philip Chinery's Guestbook is freely available guestbook software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Philip Chinery's Guestbook does not filter script...

AutomatedShops WebC 2.0/5.0 Symbolic Link Following Configuration File Weakness

No description provided by source. source: http://www.securityfocus.com/bid/7272/info It has been reported that WebC will execute in the directory of a symbolic link from which it is invoked. Because of this, it may be possible for a local user to load a configuration file that enabled dangerous...

Microburst uDirectory 2.0 - Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2884/info uDirectory is an online directory and listing management system. An input validation error exists in uDirectory that may allow remote users to execute arbitrary commands on a host running the software...

PServ 3.2 - Remote Source Code Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13638/info pServ is affected by a remote source code disclosure vulnerability. When handling a specially-crafted URI request, the application discloses the source code of scripts in the 'cgi-bin' directory. Information...

Cart32 3.0 "expdate" Administrative Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1358/info By appending the string /expdate to a request for the cart32.exe executable, http: //target/cgi-bin/cart32.exe/expdate an attacker can access an error message followed by a debugging page containing the server...

SGI IRIX 6.2 cgi-bin wrap Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/373/info A vulnerability exists in the cgi-bin program 'wrap', as included with Irix 6.2 from SGI. A failure to validate input results in a vulnerability that allows any remote attacker to view the contents of any world...

SGI IRIX <= 6.4 cgi-bin handler Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/380/info A vulnerability exists in the cgi-bin program 'handler', as included by Silicon Graphics in their Irix operating system. This vulnerability will allow a remote attacker to execute arbitrary commands on the...

Sambar Server 5.x Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7207/info An information disclosure vulnerability has been reported for Sambar Server. The vulnerability exists in some files existing in Sambar Server's cgi-bin directory. An attacker can exploit this vulnerability by...

CVE-2014-3806: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. dot dot in the xmlpath parameter...

PT-2014-5514

Name of the Vulnerable Software and Affected Versions VMTurbo Operations Manager versions prior to 4.6 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot in the xml path parameter of the cgi-bin/help/doIt.cgi...

CVE-2014-2046: Undefined Security Weakness

cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to 1 obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcludePaths method or 2 modify the firmware via...

PT-2014-4449

Name of the Vulnerable Software and Affected Versions Broadcom Ltd PIPA C211 rev2 version 1.1 Description The issue is related to the cgi-bin/rpcBridge in the web interface, which does not properly restrict access. This allows remote attackers to obtain credentials and other sensitive information...

PT-2014-2888

Name of the Vulnerable Software and Affected Versions AVTECH AVN801 DVR versions 1017-1003-1009-1003 and earlier Description A buffer overflow issue exists in the cgi-bin/user/Config.cgi component, allowing remote attackers to potentially cause a denial of service device crash and possibly execut...

Design/Logic Flaw

cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to 1 cause a denial of service reboot via a defaultreboot action or 2 reset all configuration values via a factorydefault action...

CVE-2013-7179: Improper Input Validation

The ping functionality in cgi-bin/diagnostic.cgi on Seowon Intech SWC-9100 routers allows remote attackers to execute arbitrary commands via shell metacharacters in the pingipaddr parameter...

CVE-2013-6032: Improper Input Validation

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

PT-2014-3017

Name of the Vulnerable Software and Affected Versions Lexmark X94x versions before LC.BR.P142 Lexmark X85x versions through LC4.BE.P487 Lexmark X644 and X646 versions before LC2.MC.P374 Lexmark X642 versions through LC2.MB.P318 Lexmark W840 versions through LS.HA.P252 Lexmark T64x versions before...

CVE-2013-7183: Improper Authentication

cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to 1 cause a denial of service reboot via a defaultreboot action or 2 reset all configuration values via a factorydefault action...

PT-2014-3280

Name of the Vulnerable Software and Affected Versions Seowon Intech SWC-9100 routers affected versions not specified Description The issue concerns the ping functionality in the cgi-bin/diagnostic.cgi file, which allows remote attackers to execute arbitrary commands. This is achieved by injecting...

PT-2014-3282

Name of the Vulnerable Software and Affected Versions Seowon Intech SWC-9100 routers affected versions not specified Description The issue allows remote attackers to cause a denial of service by rebooting the device or reset all configuration values to their factory defaults. This can be achieved...