csSearch csSearch.cgi setup Parameter Arbitrary Command Execution

The version of csSearch running on the remote host has a command execution vulnerability. Input to the 'print' parameter of 'csSearch.cgi' is not properly sanitized. A remote attacker could exploit this by executing arbitrary system commands with the privileges of the web server. %NASLMINLEVEL...

CVE-2001-1226

CVE-2001-1226 affects AdCycle 1.17 and earlier. The vulnerability arises because user input is not adequately filtered before being used in MySQL queries, enabling remote attackers to execute arbitrary SQL and potentially read or modify data. The CERT/CC advisory confirms the issue and notes no p...

FreeWnn 1.1 0 - jserver JS_MKDIR MetaCharacter Command Execution

FreeWnn 1.1 0 - jserver JSMKDIR MetaCharacter Command Execution // source: https://www.securityfocus.com/bid/3860/info FreeWnn 1.1.0 is a kana-kanji japanese translation system. This software is a client-server type application, with the jserver portion acting as a server and performing...

FreeWnn 1.1 0 - jserver JS_MKDIR MetaCharacter Command Execution

// source: https://www.securityfocus.com/bid/3860/info FreeWnn 1.1.0 is a kana-kanji japanese translation system. This software is a client-server type application, with the jserver portion acting as a server and performing translations for clients. The jserver component passes unsanitized input...

tdforum 1.2 Messageboard

Examination of the program "TDForum 1.2", a guest book style, unthreaded messageboard, for sale at http://www.tdscripts.com http://www.tdavidscripts.com/ aliases the same, revealed a serious client-side security risk to the users of the forum. Because user supplied data is not being sanitized,...

MailMan Webmail mmstdod.cgi Arbitrary Command Execution

The version of MailMan Webmail on the remote web server has an arbitrary command execution vulnerability. Input to the 'ALTERNATETEMPLATES' parameter of mmstdod.cgi is not properly sanitized. A remote attacker could exploit this to execute arbitrary commands on the system. %NASLMINLEVEL 70300 C...

Fred N. van Kempen dip 3.3.7 - Local Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/86/info A buffer overflow resides in 'dip-3.3.7o' and derived programs. This is a problem only on systems where 'dip' is installed setuid. The culpable code is an 'sprintf' in line 192 in 'main.c': sprintfbuf, "%s/LCK..%s", PATHLOCKD, nam; / Linux x86...