10101 matches found
Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
No description provided by source. | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | Sepal's SPBOARD v4.5 board.cgi Remote Command Execution Vulnerability Script : : POC : |---...
Sepal SPBOARD 4.5 - board.cgi Remote Command Execution
Sepal SPBOARD 4.5 - board.cgi Remote Command Execution | | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|ls -lia|&action=downfile |---...
sepalspboard-exec.txt
| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|ls -lia|&action=downfile |--- http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|cat board.cgi|&action=downfile |--- Open By Mozil...
Sepal SPBOARD 4.5 - 'board.cgi' Remote Command Execution
| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|ls -lia|&action=downfile |--- http://sansuyu.net/cgi-bin/spboard/board.cgi?id=ors1&number=908.cgi&file=|cat board.cgi|&action=downfile |--- Open By Mozil...
Sepal SPBOARD 4.5 (board.cgi) Remote Command Exec Vulnerability
Exploit for cgi platform in category web applications =============================================================== Sepal SPBOARD 4.5 board.cgi Remote Command Exec Vulnerability =============================================================== Sepal's SPBOARD v4.5 board.cgi Remote Command Executi...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Trend Micro OfficeScan CGI Parsing Buffer Overflow Vulnerability
Trend Micro OfficeScan is prone to stack based buffer overflow vulnerability. The vulnerability is due to boundary error in the CGI modules when processing specially crafted HTTP request. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources...
Ads Pro (dhtml.pl page) Remote Command Execution Exploit
No description provided by source. \Adspro Script Remote Command Execution/ Author S0l1D Script Adspro Homepage http://adspro.mhfmedia.com/index.shtm \Exploit/ http://serv.com/cgi-bin/adspro/dhtml.pl?page=adverttop.htm|id| http://serv.com/cgi-bin/adspro/dhtml.pl?page=advertlogin.htm|id|...
Count.cgi(wwwcount)远程缓冲区溢出漏洞
BugCVE: CVE-1999-0021 BUGTRAQ: 128 Count.cgi wwwcount是一个非常流行的Web站点跟踪统计CGI程序。一般它作为Web页面点击数统计。1997年10月，这个程序被发现了两个远程漏洞。第一个漏洞比较轻微，它能允许远程用户浏览到受限制的.GIF文件，可能泄漏.GIF文件里潜在的敏感数据。 第二个漏洞比较严重，count.cgi程序在处理QUERYSTRING环境变量的时候存在缓冲区溢出漏洞。远程攻击者可以发送一个超长的请求给程序就能进行溢出攻击，以Web用户的权限在系统执行任意命令。 2.3 Muhammad A. Muquit...
RoarSmithinfo2www远程执行任意命令漏洞
BugCVE: CVE-1999-0266 BUGTRAQ: 1995 “info2www”是一个将GNU Info文本转化成HTML文件的CGI程序。 某些早期版本的info2www脚本实现上存在输入验证漏洞，远程攻击者可以利用此漏洞以Web进程的权限在主机上 执行任意系统命令。 问题在于程序脚本没有过滤用户输入中包含的一些shell元字符，远程攻击者可能以Web守护程序的权限（root或nobody）在主机上执行任意程序。 1.0-1.1 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...
Tammie's Husband留言板CGI漏洞
simplestguest.cgi留言板程序没有正确检查输入数据的有效性，直接用用户提供的 guestbook 变量来作为文件名，并用open函数打开。因此任何人都可以在远程系 统上以web服务器的权限执行任意命令。 有问题的代码部分： $outputdir = $basedir . / . $contentsbyname'guestbook' ; $outputfile = $outputdir ; sends to write output. .... OUTPUT sub output &BakeCookies'guestbook',Signed; open OUTFILE,...
Viralator <= 0.9pre1 Command Execution Vulnerability
The CGI SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.80093";...
Sympa < 4.1.3 XSS Vulnerability
The remote web server contains a CGI script that is affected by a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2008 Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Sambar XSS Vulnerability - Active Check
The Sambar web server comes with a set of CGIs that are prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
viralator
The CGI 'viralator.cgi' is installed. Some versions of this CGI are don't check properly the user input and allow anyone to execute arbitrary commands with the privileges of the web server No flaw was tested. Your script might be a safe version. Solutions : Upgrade this script to version 0.9pre2 ...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. CNCat: crossite scripting via description field...
F-Secure Policy Manager Server < 7.0.1 'fsmsh.dll module' DoS Vulnerability
F-Secure Policy Manager Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
F-Secure Policy Manager Server fsmsh.dll module DoS
The remote host is an F-Secure Policy Manager Server. Description : The remote host is running a version a F-Secure Policy Manager Server which is vulnerable to a denial of service. A malicious user can forge a request to query a MS-DOS device name through the 'fsmsh.dll' CGI module, which will...
overflow.cgi detection
/cgi-bin/.cobalt/overflow/overflow.cgi was detected. Some versions of this CGI allow remote users to execute arbitrary commands with the privileges of the web server. SPDX-FileCopyrightText: 2008 Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
CVE-2008-3862
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110, allows remote attackers to execute arbitrary code via an HTTP POST request containing crafted form data, related to...