Design/Logic Flaw

Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files...

CVE-2007-0669

Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI session files...

CVE-2007-0669

CVE-2007-0669: Concrete details from the connected CERT/NVD entry show that TWiki 4.0.0–4.1.0 is affected by an arbitrary code execution vulnerability through CGI session files in the /tmp directory. An attacker who can create CGI session files may execute Perl code with the web server’s privileg...

Exponent CMS 0.96.3 - 'view' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.="...

CVE-2004-1425

CVE-2004-1425 describes a directory traversal vulnerability in Moodle 1.4.2 and earlier, where an attacker can read arbitrary session files by manipulating the file parameter with a .. sequence. The affected component is Moodle’s file.php; root cause is improper validation of the file path, enabl...

[ GLSA 200409-08 ] Ruby: CGI::Session creates files insecurely

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200409-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...