CVE-2001-1290

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the tablewidth parameter...

CVE-2001-1290

The CVE-2001-1290 entry describes a vulnerability in Admin.cgi of Active Classifieds Free Edition 1.0 (and possibly commercial versions) where a remote attacker can modify configuration, gain privileges, and execute arbitrary Perl code through the table_width parameter. Affected component: admin....

CVE-2002-1600

Directory traversal vulnerability in Mike Spice's My Classifieds classifieds.cgi before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter...

Несанкционированный доступ в Active Web Classifieds (unauthorized access)

Ко многим конфигурационным функциям можно обратиться в обход защиты паролем...

Active Web Classifieds failure to authenticate leads to arbitrary code execution

Active Classifieds Free Edition from Active Web Suite Technologies http://www.activewebsuite.com fails to authenticate administrators, which allows unauthorized modification of configuration files, which in turn, allows remote arbitrary code execution. Tested on: Program: Active Classifieds Free...

CVE-2001-1290

admin.cgi in Active Classifieds Free Edition 1.0, and possibly commercial versions, allows remote attackers to modify the configuration, gain privileges, and execute arbitrary Perl code via the tablewidth parameter...

Active Classifieds 1.0 - Arbitrary Code Execution

Active Classifieds 1.0 - Arbitrary Code Execution source: https://www.securityfocus.com/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system. An origin validation error exists in the Free Edition of Active Classifieds tha...

Active Classifieds 1.0 - Arbitrary Code Execution

source: https://www.securityfocus.com/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system. An origin validation error exists in the Free Edition of Active Classifieds that may allow remote users to perform some...

PT-1999-1476 · Unknown · Classifieds.Cgi

Name of the Vulnerable Software and Affected Versions: classifieds.cgi affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. This can be done through the classifieds.cgi script...

Greg Matthews - 'Classifieds.cgi' 1.0 MetaCharacter

source: https://www.securityfocus.com/bid/2020/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to read files on the host machine, with the privileges of the we...