CVE-2002-0206: Undefined Security Weakness

index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter...

CVE-2002-0262: Undefined Security Weakness

Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Jon Howell Faq-O-Matic 2.7 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/4565/info Faq-O-Matic 2.711 and 2.712 is a web-based Frequently Asked Question FAQ management system. It is vulnerable to a cross site scripting issue arising from a failure to filter HTML or script from a malformed query, returning the submitted script a...

CVE-2001-1187

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter...

CVE-2001-1187: Undefined Security Weakness

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter...

CVE-2001-0992: Undefined Security Weakness

shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...

CVE-2001-1187

csvform.pl 0.1 allows remote attackers to execute arbitrary commands via metacharacters in the file parameter...

CVE-2001-0466: Undefined Security Weakness

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2001-0123: Undefined Security Weakness

Directory traversal vulnerability in eXtropia bbsforum.cgi 1.0 allows remote attackers to read arbitrary files via a .. dot dot attack on the file parameter...

CVE-2001-0025

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...

CVE-2001-0025

CVE-2001-0025 affects the ad.cgi CGI program by Leif Wright. The vulnerability allows remote arbitrary command execution via shell metacharacters in the file parameter, with the CGI typically running under web server privileges (often root or nobody). The issue is documented in multiple sources (...

CVE-2001-0025: Undefined Security Weakness

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter...

CVE-2000-1092: Undefined Security Weakness

loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename in the "file" parameter...