5626 matches found
DSA-2997-1 reportbug - security update
Bulletin has no description...
Code injection
maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...
CVE-2014-5112: Improper Control of Generation of Code
maint/modules/home/index.php in Fonality trixbox allows remote attackers to execute arbitrary commands via shell metacharacters in the lang parameter...
CVE-2014-5023
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...
Design/Logic Flaw
Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/...
CVE-2014-4511: Undefined Security Weakness
Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a request for a 1 blame, 2 file, or 3 stats page, as demonstrated by requests to blame/master/, master/, and stats/master/...
CVE-2013-7392: Undefined Security Weakness
Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/...
CVE-2014-5023: Undefined Security Weakness
Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command...
Code injection
TimThumb 2.8.13 and WordThumb 1.07, when Webshot aka Webshots is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter...
CVE-2014-4663
TimThumb 2.8.13 and WordThumb 1.07, when Webshot aka Webshots is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter...
CVE-2014-4663
TimThumb 2.8.13 and WordThumb 1.07, when Webshot aka Webshots is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter...
cPanel 5/6/7/8/9 Resetpass Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9848/info A potential remote command execution vulnerability has been discovered in the cPanel Application. This issue occurs due to insufficient sanitization of externally supplied data to the script that handles resetti...
WEBgais 1.0 websendmail Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the gais Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to execute arbitrary...
RXGoogle.CGI 1.0/2.5 Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9575/info The rxgoogle.cgi search script is prone to a cross-site scripting vulnerability because the software fails to sanitize user input and allows various metacharacters that may facilitate cross-site scripting attack...
GREED 0.81 GRX File List Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12034/info greed Get and Resume Elite Edition is prone to unauthorized command execution. This issue is exposed when the application processes a GRX file list that specifies shell metacharacters and commands in file names...
freebsd 4.2-stable ftpd glob() Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/2548/info The BSD ftp daemon and derivatives such as IRIX ftpd or the ftp daemon shipped with Kerberos 5 contain a number of buffer overflows that may lead to a compromise of root access to malicious users. During parsing...
Php City Portal Script Software SQL Injection
No description provided by source. Exploit Title: Php City Portal Script Software SQL Injection Google Dork: Powered by PHPCityPortal.com Date: Decembar/07/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://phpcityportal.com Version: 1.1 Tested on: Apache Unix An attacker may execute...
SGI IRIX 6.x rpc.xfsmd Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5075/info Throghout the implementation of the supported remote procedure calls, the server uses the popen libc function. When popen is used, arguments passed to the RPC are included in the command string. These arguments...
PHPix 2.0.3 - Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9458/info It has been reported that PHPix is vulnerable to a remote command execution vulnerability due to poor handling of externally supplied data such as shell metacharacters. This issue may allow unauthorized access t...
Psunami Bulletin Board 0.x Psunami.CGI Remote Command Execution Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/6607/info Psunami Bulletin Board is prone to a remote command execution vulnerability. Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote...