CS Whois Lookup Command Execution

CS Whois Lookup index.php ip Remote Command Execution Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Download : http://www.hotscripts.com/listings/jump/download/84580/ + Remote Command Execution Vulnerable code in index.php -----------------------------------------...

CS Whois Lookup - 'ip' Remote Command Execution

source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer...

Command injection

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6556: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

Really innocent? Peep Serv-U password-cracking-vulnerability warning-the black bar safety net

Now the invasion, get a WebShell is a very easy thing, especially with the WHOIS technical disclosure obtained after the WebShell is even more simple. There are times when the other server is set to be not very sick, we can use directly enter the hard drive path, so as to obtain access to access ...

Unfixed XSS vulnerability at www.selfseo.com

Security researcher C1c4Tr1Z, has submitted on 19/03/2008 a cross-site-scripting XSS vulnerability affecting www.selfseo.com, which at the time of submission ranked 39848 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/05/2008. It is current...

CVE-2008-1041: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mwhois.php in Matt Wilson Matt's Whois MWhois allows remote attackers to inject arbitrary web script or HTML via the domain parameter...

mattswhois-xss.txt

+==============================================================================+ + Matt's Whois mwhois.php - ALL Versions XSS Multiple Remote Vulnerabilities + +==============================================================================+ Authors: Ivan Sanchez & Maximiliano Soler. Product: MWho...

Unfixed XSS vulnerability at www.domaintechs.com

Security researcher X-Turk, has submitted on 10/02/2007 a cross-site-scripting XSS vulnerability affecting www.domaintechs.com, which at the time of submission ranked 4481278 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/02/2007. It is...

internic-xss.txt

Title : InterNIC WHOIS lookup XSS exploit Description : InterNIC has a WHOIS lookup function wich suffers from an XSS vulnerability Author : Tosser Contact : [email protected] Proof : http://reports.internic.net/cgi/whois?whoisnic=%3Ciframe%20src=%22javascript:alert'XSS'%22%3E&type=domain or go to...

Microsoft Windows Explorer - '.GIF' Image Denial of Service

!/usr/bin/perl Bug Found By ::DeltahackingTEAM Coded By Reza.Yavari Dr.Pantagon Web Site::Www.Deltahacking.net And Www.DeltaSecurity.ir And Www.PersianWhois.com Free Upload :: Www.Persianupload.com And Www.Persianupload.net Email: Dr.Pantagon ADeltasecurity.ir We...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

CVE-2007-1503

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the createctcpmessage function using the message argument to the 1 me or 2 ctcp commands, and possibly related vectors involving the 3 whois, 4...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2965

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2006-2965

Particle Soft Particle Whois 1.0.3 is affected by multiple XSS flaws where unsanitized input can be injected via (1) the target parameter in index.php and (2) the input box. The root cause is improper handling of user-supplied data leading to script/HTML execution in the victim’s browser. Publicl...

CVE-2006-2965: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 the target parameter in index.php and 2 the "input box."...

CVE-2005-4699

Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the qHost parameter...

CVE-2005-4699: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in TellMe 1.2 and earlier allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the qHost parameter...

PT-2005-5364 · Tellme · Tellme

Name of the Vulnerable Software and Affected Versions: TellMe versions 1.2 and earlier Description: The issue allows remote attackers to modify command line arguments for the Whois program and obtain sensitive information via "--" style options in the q Host parameter. Recommendations: For TellMe...