Alert: Carello File Creation flaw

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

Дырка в Web-counter'e counterfiglet

Вызов system с непроверяемым на shell-метасимволы вводом пользователя позволяют выполнить любое приложение на сервере, например http://web-server/cgi-bin/counterfiglet/nc/f=;echo;w;uname20-a;id...

PT-2000-1120 · Unknown · Check It Out

Name of the Vulnerable Software and Affected Versions: Check It Out affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

CVE-1999-0260

The CVE-1999-0260 entry concerns the jj CGI program, where command execution is possible via shell metacharacters. Connected sources (NVD entry) cite a high-severity issue (AV:N/AC:L/PR:None/UI:N/S:C/I:P/A:P; base score 7.5) affecting the jj CGI component, with no explicit product version or fix ...