CVE-1999-1179

CVE-1999-1179 describes a vulnerability in the included man.sh CGI script from SysAdmin Magazine (May 1998) that allows remote attackers to execute arbitrary commands. The NVD notes a CVSSv2 base score of 7.5 (HIGH) with AV:N/AC:L/Au:N/C:P/I:P/A:P. The entry lists no exploitation status and provi...

CVE-1999-1357

CVE-1999-1357 affects Netscape Communicator 4.04–4.7 on UNIX, where 0x8b is mapped to ‘’, enabling cross-site scripting via CGI scripts that fail to filter these characters. The description does not specify affected versions beyond those, nor the root cause beyond character mapping in HTML contex...

CVE-1999-1378

dbmlparser.exe CGI guestbook program does not perform a chroot operation properly, which allows remote attackers to read arbitrary files...

CVE-1999-1381

Buffer overflow in dbadmin CGI program 1.0.1 on Linux allows remote attackers to execute arbitrary commands...

CVE-1999-1469

Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with 1 a long URL, or 2 a long User-Agent MIME header...

CVE-2001-0958

Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs 1 register.dll, 2 ContentFilter.dll, 3 SFNofitication.dll, 4 register.dll, 5 TOP10.dll, 6 SpamExcp.dll, and 7...

CVE-1999-1278

nlog CGI scripts do not properly filter shell metacharacters from the IP address argument, which could allow remote attackers to execute certain commands via 1 nlog-smb.pl or 2 rpc-nlog.pl...

CVE-1999-1154

The CVE-1999-1154 entry concerns the LakeWeb Filemail CGI script. The vulnerability arises when a recipient email address can include shell metacharacters, enabling remote command execution via the CGI script. The issue is rooted in improper handling of email input in the CGI component, with a ne...

CVE-1999-1381

The CVE covers a buffer overflow in the dbadmin CGI program 1.0.1 on Linux, enabling remote command execution. The available sources state this vulnerability allows arbitrary commands to be executed by an unauthenticated attacker over the network. No remediation or patch details are provided in t...

CVE-1999-1462

The CVE-1999-1462 issue affects the Big Brother bb-hist.sh History module, specifically in Big Brother 1.09b and 1.09c. The vulnerability is a directory traversal flaw exposed through the HISTFILE parameter of the bb-hist.sh CGI, allowing a remote attacker to read arbitrary files on the affected ...

CVE-1999-1436

Ray Chan WWW Authorization Gateway 0.1 CGI program is affected by a remote command execution vulnerability: an attacker can supply shell metacharacters in the "user" parameter to execute arbitrary commands. The available sources corroborate this description across CVE registries, but do not provi...

CVE-1999-1070

Buffer overflow in ping CGI program in Xylogics Annex terminal service allows remote attackers to cause a denial of service via a long query parameter...

CVE-1999-1063

CDomain whoisraw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter...

CVE-1999-1281

Development version of Breeze Network Server allows remote attackers to cause the system to reboot by accessing the configbreeze CGI program...

CVE-1999-1357

Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...

CVE-1999-1469

The vulnerability CVE-1999-1469 stems from a buffer overflow in the w3-auth CGI program within the miniSQL package. An attacker can remotely execute arbitrary commands by sending an HTTP request with a long URL or a long User-Agent header. The CVSS data indicates a network attack vector with low ...

CVE-1999-1154

LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...

CVE-1999-1378

The CVE-1999-1378 entry describes a vulnerability in the dbmlparser.exe CGI guestbook program where a chroot operation is not performed properly, allowing remote attackers to read arbitrary files. The affected component is the CGI guestbook program implemented by dbmlparser.exe; root cause is inc...

Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure

Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure source: https://www.securityfocus.com/bid/3304/info Power Up HTML is a set of HTML-like commands that can be placed into web pages. It provides a central routing point to simplify programming and customization of CGI script...

Power Up HTML 0.8033 Beta - Directory Traversal Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/3304/info Power Up HTML is a set of HTML-like commands that can be placed into web pages. It provides a central routing point to simplify programming and customization of CGI scripts. A vulnerability exists in Power Up HTML which allows directory traversa...