[SA15054] WebAPP E-Cart Module Shell Command Injection Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: WebAPP E-Cart Module Shell Command Injection...

CVE-2005-0927

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...

CVE-2005-0927

Technical details about CVE-2005-0927 are not publicly available in the provided documents. Monitor for updates; no confirmed affected versions, root cause, or remediation are stated here.

CVE-2005-0927: Undefined Security Weakness

Unknown vulnerability in subs.pl for WebAPP 0.9.9 through 0.9.9.2 has unknown impact and attack vectors, probably involving shell metacharacters or .. sequences...

CVE-2004-1742

Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. dot dot in the viewcat parameter...

CVE-2004-1742

WebAPP 0.9.9 is affected by a directory traversal in the index.cgi viewcat parameter, allowing remote attackers to read arbitrary files on the web server. The issue arises from directory-traversal filtering failures in the CGI, exposing the host file system with web server privileges. Affected ve...

CVE-2004-1742: Undefined Security Weakness

Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. dot dot in the viewcat parameter...

[UNIX] WebAPP Directory Traversal and Encrypted DES Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

webapp.traversal.txt

WebAPP is advertised as the internet's most feature rich, easy to run PERL based portal system. Its home site is at http://www.web-app.org/ Some features are : -Easy to Install on standard Unix servers! Windows user-supported only! -User Profiles -Message forums -Private messaging between members...

WebAPP directory traversal and ability to retrieve the DES encrypted password hash

WebAPP is advertised as the internet's most feature rich, easy to run PERL based portal system. Its home site is at http://www.web-app.org/ Some features are : -Easy to Install on standard Unix servers! Windows user-supported only! -User Profiles -Message forums -Private messaging between members...

CVE-2004-1742

Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. dot dot in the viewcat parameter...

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal

Web-APP.Org WebAPP 0.80.9.x - Directory Traversal source: https://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retriev...

CVE-2001-0824: Undefined Security Weakness

Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into 1 a request for a .JSP file, or 2 a request to the webapp/examples/ directory, which inserts the Javascript into an error page...