twiki-disclose.txt

TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes Local : No Date : 05/08/2008 Credits : Th1nk3r...

TWiki 4.2.0 (configure) Remote File Disclosure Vulnerability

Exploit for cgi platform in category web applications ============================================================ TWiki 4.2.0 configure Remote File Disclosure Vulnerability ============================================================ TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian...

Debian Security Advisory DSA 371-1 (perl)

The remote host is missing an update to perl announced via advisory DSA 371-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 371-1 (perl)

The remote host is missing an update to perl announced via advisory DSA 371-1. OpenVAS Vulnerability Test $Id: deb3711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 371-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

[Full-disclosure] PacSec Hype Security Team: CGI.pm param injection

====================================================================== PacSec Hype Security Team param injection in CGI.pm and inheritors allows SQL injection and manipulation of data bypassing many perl web form validators ======================================================================...

Multiple Sun Solaris perl modules problems

Safe.pm protection bypass, CGI.pm crossite scripting...

Debian DSA-371-1 : perl - XSS

A cross-site scripting vulnerability exists in the startform function in CGI.pm. This function outputs user-controlled data into the action attribute of a form element without sanitizing it, allowing a remote user to execute arbitrary web script within the context of the generated page. Any progr...

RHEL 2.1 : perl (RHSA-2003:257)

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Two security issues have been found in Perl that...

Important: Red Hat Security Advisory: : : : Updated Perl packages fix security issues.

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Updated 3 Oct 2003 Updated modperl packages have been added for Red Hat Linux 7.1, which are required due to the move to Perl version 5.6.1 on this platform. Perl i...

Important: Red Hat Security Advisory: perl security update

Updated Perl packages that fix a security issue in Safe.pm and a cross-site scripting XSS vulnerability in CGI.pm are now available. Perl is a high-level programming language commonly used for system administration utilities and Web programming. Two security issues have been found in Perl that...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

[SECURITY] [DSA-371-1] New perl packages fix cross-site scripting

-------------------------------------------------------------------------- Debian Security Advisory DSA 371-1 [email protected] http://www.debian.org/security/ Matt Zimmerman August 11th, 2003 http://www.debian.org/security/faq -...

DSA-371 perl - cross-site scripting

Bulletin has no description...

CVE-2003-0615

Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615: Undefined Security Weakness

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

[Full-Disclosure] CGI.pm vulnerable to Cross-site Scripting.

Advisory Title: CGI.pm vulnerable to Cross-site Scripting. Release Date: July 19 2003 Application: CGI.pm - which is by default included in many common Perl distributions. Platform: Most platforms. Tested on Apache and IIS. Version: CGI.pm Severity: Effects scripts which make use of startform...