The vulnerabilities of KW Multiprog and KW ProConOS in programming and debugging tools allow attackers to execute arbitrary commands.

The vulnerability of KW Multiprog and KW ProConOS programming and debugging tools is related to errors in managing registration data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the PLK configuration protocol...

NXFilter 3.0.3 Cross Site Scripting

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NXFILTER-XSS.txt Vendor: ================================ www.nxfilter.org/p2/ Product: ================================ NXFilter v3.0.3 Vulnerability Type: =========================...

NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities

NXFilter 3.0.3 - Multiple Cross-Site Scripting Vulnerabilities + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NXFILTER-XSS.txt Vendor: ================================ www.nxfilter.org/p2/ Product: ================================...

CVE-2008-2915: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php aka the search module in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the 1 position or 2 kw parameter...

CVE-2008-2914: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in jobseekers/JobSearch3.php aka the search module in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the 1 kw or 2 position parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-6597: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...

CVE-2006-5635

CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...

CVE-2006-5635: Undefined Security Weakness

SQL injection vulnerability in forum/search.asp in Web Wiz Forums allows remote attackers to execute arbitrary SQL commands via the KW parameter...

CVE-2006-5532: Undefined Security Weakness

Cross-site scripting XSS vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information...

KW Whois CGI whois Parameter Arbitrary Command Execution

The version of the KW whois CGI script installed on the remote web server fails to filter input to the 'whois' parameter of shell metacharacters. An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C...

CVE-2000-0941

The CVE-2000-0941 entry concerns the KW Whois CGI script (KW Web) version 1.0, which fails to filter shell metacharacters in the 'whois' parameter. This allows an unauthenticated, remote attacker to execute arbitrary commands with the privileges of the http daemon. The vulnerability is demonstrat...

CVE-2000-0941: Undefined Security Weakness

Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter...

Remote command execution via KW Whois 1.0

Greetings, There is a vulnerability in Kootenay Web Inc's KW Whois v1.0 which allows malicious users to execute commands as the uid/gid of the webserver. The hole lies in unchecked user input via an input form box. The form element input type=text name="whois" is not checked by the script for...