Gary McGraw on BSIMM2, Software Security and Cargo Cult Science

Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science. Podcast audio courtesy of Where’s Aubrey. Subscribe to the Digital Underground podcast...

CVE-2008-6054

PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

CVE-2008-6054: Undefined Security Weakness

PreProjects Pre Courier and Cargo Business stores dbcourior.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request...

Chama Cargo cross-site scripting vulnerability

Overview Chama Cargo, a cgi program written in perl for creating shopping websites, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution None...

CVE-2006-6249

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6249

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6249

CVE-2006-6249 is a cross-site scripting (XSS) vulnerability in Chama Cargo (a CGI Perl-based shopping site). Affected: Chama Cargo 4.36 and earlier. Root cause/impact: allows remote attackers to inject arbitrary web script or HTML that can execute in the victim’s browser (vector unspecified). Pub...

CVE-2006-6249

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6249: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#08494205 Chama Cargo cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected Chama Cargo v4.36 and earlier For more information, refer to the vendor's website...