Ruby cgi.rb Denial of Service Vulnerability

Overview The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces. Impact An attacker could cause a Denial of Service DoS on the Web services using cgi.rb...

Shopping Basket Professional vulnerable to OS command injection

Overview Shopping Basket Professional provided by CGI RESCUE contains a vulnerability which allows a remote attacker to inject an arbitrary OS command as it does not properly validate input data. Impact A remote attacker could execute an arbitrary OS command on the server where Shopping Basket...

MailDwarf cross-site scripting vulnerability

Overview MailDwarf is a mail form CGI provided by HTML Dwarf. MailDwarf contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: crossite scripting. Invision Power Board: XSS...

[SECURITY] Fedora 9 Update: lighttpd-1.4.19-4.fc9

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Power Phlogger: crossite scripting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Unfixed XSS vulnerability at www.westernhagen.de

Security researcher mebx, has submitted on 14/05/2008 a cross-site-scripting XSS vulnerability affecting www.westernhagen.de, which at the time of submission ranked 2302630 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2008. It is...

CVE-2007-5803

Multiple cross-site scripting XSS vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360...

CVE-2007-5803

Multiple cross-site scripting XSS vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360...

CVE-2007-5803

Multiple cross-site scripting XSS vulnerabilities in CGI programs in Nagios before 2.12 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-5624 and CVE-2008-1360...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

e-107 Plugin zogo-shop 1.16 Beta 13 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== e-107 Plugin zogo-shop 1.16 Beta 13 SQL Injection Vulnerability =============================================================== By email protectedKing / t4cs1zkr4L Zogo-shop...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. pMachinePro: HTTP Response Splitting...

CVE-2003-1558

Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service crash and possibly execute arbitrary code via a long CGI request passed to the docgi function...

CVE-2003-1558

Vulnerability: CVE-2003-1558 affects fnord 1.6,×specifically the httpd.c do_cgi function. The issue is a buffer overflow caused by a long CGI request. Impact: Remote attackers can cause a denial of service (crash) and may potentially execute arbitrary code. Details: Described as a buffer overflow...

Update Protection against Multiple Vendor CUPS Administration Interface CGI Heap Overflow vulnerability

A heap overflow vulnerability has been discovered in Apple’s Common Unix Printing System CUPS. The Common Unix Printing System CUPS is a modular printing system for Unix-like operating systems that allows a computer to act as a print server. A computer running CUPS is a host that can accept print...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. pMachinePro: HTTP Response Splitting...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...