10101 matches found
FreeBSD : awstats -- multiple XSS vulnerabilities (27d78386-d35f-11dd-b800-001b77d09812)
Secunia reports : Morgan Todd has discovered a vulnerability in AWStats, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed in the URL to awstats.pl is not properly sanitised before being returned to the user. This can be exploited to execute arbitrar...
CVE-2008-5809
futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id...
Design/Logic Flaw
futomi CGI Cafe Access Analyzer CGI Standard 4.0.1 and earlier and Access Analyzer CGI Professional 4.11.3 and earlier use a predictable session id, which makes it easier for remote attackers to hijack sessions, and obtain sensitive information about analysis results, via a modified id...
CVE-2008-5809
The CVE-2008-5809 affects futomi CGI Cafe’s Access Analyzer CGI: Standard v4.0.1 and earlier and Professional v4.11.3 and earlier, where a predictable session ID enables remote attackers to hijack sessions and view analysis results. Root cause: predictable session identifiers. Impact: partial dis...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: automated account registration, DoS...
A CGI program vulnerability discovery-vulnerability warning-the black bar safety net
Source: phpeval's BLOG Author: phpeval Yesterday a friend threw me acgiprogram. Call me to think of a way to get a SHELL. The CGI program but I've never seen it. Experience this for me brand new things. It really is a bit no way. But to throw to. Just when learning. I bite the bullet and see. The...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. bbPress: crossite scripting, protection bypass...
Directory traversal
Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-5723
Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-5723
CVE-2008-5723 describes a directory traversal vulnerability in CGI RESCUE KanniBBS2000 (also known as MiniBBS2000/MiniBBS2000i) prior to version 1.03, enabling a remote attacker to read arbitrary files on the server. Connected sources specify that affected products include MiniBBS2000/v1.02 and e...
CVE-2008-5723
Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. NetCat CMS: directory traversal, SQL injection...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: crossite scripting, DoS...
Barracuda Spam Firewall < 3.5.12.007 Multiple Vulnerabilities (SQLi, XSS)
Binary data 4795.prm...
On in the browser*. exe file the explore-exploit warning-the black bar safety net
On in the browser. exe file explore in depth A: really can in the browser command file? The answer is Yes. （Wow, cool! Can......） But don't happy, can only be performed server-side, but is must be authorized. Otherwise the server think the Black you're too easy. Who dares to look at me, I just...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CapCC for WordPress - SQL injection, automation protection bypass, crossite request forgery...
Sun Java System Identity Manager Detection
Sun Java System Identity Manager, an enterprise tool for identity management, is installed on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35104; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. EZ Publish: privilege escalation from user to CMS Administrator + Privilege escalation from CMS Administrator to system user...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CapCC for WordPress - crossite scripting, information leakage. Blogsmith - crossite scripting...