1791 matches found
SCAN Associates Advisory: madhater perlbot 1.0 beta - Remote Command Execution
perlbot 1.0 beta - Remote Command Execution Discovered By guejez of scan-associates.net About perlbot: ------------------ quote from perlbot website "" /quote from perlbot website perlbot is avaliable at http://stigmata.gothcafe.com/madhater Vulnerable tested Versions: -------------------- Perlbo...
CVE-2002-0436
sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...
CVE-2002-0436: Undefined Security Weakness
sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...
CVE-2002-0352
Phorum 3.3.2 is vulnerable to an information-disclosure issue in stats.php that allows remote attackers to determine the email addresses of the 10 most active users via an unauthenticated direct HTTP request. The root cause is the lack of authentication for stats.php, enabling access to user-iden...
xNewsletter 1.0 - Form Field Input Validation
source: https://www.securityfocus.com/bid/4516/info xNewsletter is a script that allows web users to subscribe to a newsletter. It is written in PHP and will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. xNewsletter does not sanitize dangerous characters fro...
CVE-2001-0660
Outlook Web Access OWA in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list GAL...
CVE-2001-0660: Undefined Security Weakness
Outlook Web Access OWA in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list GAL...
CVE-1999-1153
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1153: Undefined Security Weakness
HAMcards Postcard CGI script 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-1999-1155: Undefined Security Weakness
LakeWeb Mail List CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
Microsoft Exchange Outlook Web Access fails to authenticate users when searching the Global Address List
Overview Microsoft Exchange servers that offer the Outlook Web Access service are vulnerable to an information disclosure vulnerability that can reveal any email address stored in the Global Address List. Description The Outlook Web Access OWA component of Microsoft Exchange allows users to acces...
CVE-1999-1154: Undefined Security Weakness
LakeWeb Filemail CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient email address...
CVE-2001-0400
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters "" in the email address...
CVE-2001-0400
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters "" in the email address...
CVE-2001-0400
CVE-2001-0400 affects the script nph-maillist.pl , where remote attackers can execute arbitrary commands by injecting shell metacharacters ("`") into the email address. Public records in the connected OpenVAS entries refer to nph-publish.cgi with a known flaw that allows command execution with th...
CVE-2001-0400: Undefined Security Weakness
nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters "" in the email address...
CVE-2001-0099
CVE-2001-0099 concerns the bsguest.cgi guestbook script. The issue allows a remote attacker to execute arbitrary commands by supplying shell metacharacters in the email address field, enabling a direct command-execution path via the web server. This vulnerability is evidenced across multiple sour...
CVE-2001-0099
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address...