83 matches found
NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'msf/core/exploit/filedropper' class Metasploit3...
NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution
This module abuses a lack of authorization in the NetIQ Privileged User Manager service unifid.exe to execute arbitrary perl code. The problem exists in the ldapagnt module. The module has been tested successfully on NetIQ PUM 2.3.1 over Windows 2003 SP2, which allows to execute arbitrary code wi...
PT-2012-4411
Name of the Vulnerable Software and Affected Versions Webmin versions 1.590 and earlier Description The issue allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type parameter, also referred to as the monitor type name. Recommendations For Webm...
CVE-2012-2981: Improper Input Validation
Webmin 1.590 and earlier allows remote authenticated users to execute arbitrary Perl code via a crafted file associated with the type aka monitor type name parameter...
Gentoo Security Advisory GLSA 200508-07 (awstats)
The remote host is missing updates announced in advisory GLSA 200508-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2006-4731
Multiple directory traversal vulnerabilities in 1 login.pl and 2 admin.pl in a SQL-Ledger before 2.6.19 and b LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ dot dot slash...
CVE-2006-4731: Undefined Security Weakness
Multiple directory traversal vulnerabilities in 1 login.pl and 2 admin.pl in a SQL-Ledger before 2.6.19 and b LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ dot dot slash...
PT-2005-3703 · Plain Black · Webgui
Name of the Vulnerable Software and Affected Versions: WebGUI versions prior to 6.7.3 Description: The issue allows remote attackers to execute arbitrary Perl code via multiple eval injection vulnerabilities in the following modules: 1 Help.pm, 2 International.pm, or 3 WebGUI.pm. Recommendations:...
CVE-2005-2837: Improper Control of Generation of Code
Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...
WebGUI Perl Code Execution Vulnerabilities
Secunia Advisory: SA16682 Release Date: 2005-09-02 Critical: Highly critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: WebGUI 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description: Some...
CVE-2002-1752: Improper Control of Generation of Code
csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function...
AwStats <= 6.4 Denial Of Service (with Advisory)
Exploit for cgi platform in category web applications ================================================ AwStats new Proto = "tcp", PeerAddr = "$server", PeerPort = "80" || die "Error\n"; print $socket "GET /cgi-bin/awstats-6.4/awstats.pl?&hack=$rp&PluginMode=:sleep HT...
AWStats 6.4 - Denial of Service
!/usr/bin/perl Summarized the advisory www.ghc.ru GHC: /str0ke 0 Exploitable example raw log plugin: Attacker can read sensitive information http://server/cgi-bin/awstats-6.4/awstats.pl?pluginmode=rawlog&loadplugin=rawlog 1 Perl code execution. This script...
AWStats 6.4 - Denial of Service
AWStats 6.4 - Denial of Service !/usr/bin/perl Summarized the advisory www.ghc.ru GHC: /str0ke 0 Exploitable example raw log plugin: Attacker can read sensitive information http://server/cgi-bin/awstats-6.4/awstats.pl?pluginmode=rawlog&loadplugin=rawlog 1 Perl code execution. This script...
AWStats < 6.5 Perl Content-Parsing Code Execution
Binary data 2613.prm...
AwStats <= 6.4 Denial Of Service (with Advisory)
No description provided by source. !/usr/bin/perl Summarized the advisory www.ghc.ru GHC: /str0ke 0 Exploitable example raw log plugin: Attacker can read sensitive information http://server/cgi-bin/awstats-6.4/awstats.pl?pluginmode=rawlog&loadplugin=rawlog 1 Perl code execution. This script...
CVE-2002-1436
The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request...
CVE-2002-1750
csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function...
CVE-2002-0924
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability...
CVE-2002-0924: Undefined Security Weakness
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability...