CVE-2006-0680

CVE-2006-0680 affects WebGUI prior to version 6.8.6-gamma, allowing remote attackers to create an account via a specific URL when anonymous registration is disabled. The provided documents confirm the affected software and the vulnerability condition; no explicit fix/version is stated within the ...

CVE-2006-0680

Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL...

WebGUI < 6.8.6 'Anonymous' Account Creation

Binary data 3427.prm...

[SA18819] WebGUI User Account Creation Vulnerability

TITLE: WebGUI User Account Creation Vulnerability SECUNIA ADVISORY ID: SA18819 VERIFY ADVISORY: http://secunia.com/advisories/18819/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: A vulnerability has been...

CVE-2005-4694

WebGUI

CVE-2005-4694

Unspecified vulnerability in the wwwadd method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 gamma allows remote attackers to inject arbitrary Javascript via the 1 url and 2 name field of the default email form...

CVE-2006-0165

Cross-site scripting XSS vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 gamma allows remote attackers to inject arbitrary Javascript via the 1 url and 2 name field of the default email form...

CVE-2006-0165

CVE-2006-0165 affects Plain Black WebGUI (DataForm Entries) prior to version 6.8.4 (gamma). The vulnerability arises in the default email form’s url and name fields, enabling remote attackers to inject arbitrary Javascript (XSS). The provided sources confirm the affected product and vulnerable co...

[SA18372] WebGUI Form Module Script Insertion Vulnerability

TITLE: WebGUI Form Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18372 VERIFY ADVISORY: http://secunia.com/advisories/18372/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: Hans Wolters has...

CVE-2005-4694

Unspecified vulnerability in the wwwadd method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6 allows attackers to execute arbitrary code via unknown attack vectors...

WebGUI < 6.7.6 Asset.pm Asset Addition Arbitrary Code Execution

The remote host is running WebGUI, a content management system from Plain Black Software. The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the 'class' variable to various sources before using it to run commands. By leveraging this flaw, an attacker may ...

[SA17158] WebGUI Unspecified Arbitrary Code Execution Vulnerability

TITLE: WebGUI Unspecified Arbitrary Code Execution Vulnerability SECUNIA ADVISORY ID: SA17158 VERIFY ADVISORY: http://secunia.com/advisories/17158/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: WebGUI 6.x http://secunia.com/product/4293/ DESCRIPTION: A vulnerability...

WebGUI < 6.7.6 Unspecified Code Execution

Binary data 3253.prm...

WebGUI 6.x - Arbitrary Command Execution

WebGUI 6.x - Arbitrary Command Execution source: https://www.securityfocus.com/bid/15083/info WebGUI is prone to an arbitrary command execution vulnerability. This is due to insufficient sanitization of user-supplied data. This issue can facilitate unauthorized remote access...

WebGUI 6.x - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/15083/info WebGUI is prone to an arbitrary command execution vulnerability. This is due to insufficient sanitization of user-supplied data. This issue can facilitate unauthorized remote access...

CVE-2005-2837

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

CVE-2005-2837

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

CVE-2005-2837

CVE-2005-2837 affects Plain Black Software WebGUI prior to 6.7.3. Multiple eval injection flaws in the modules Help.pm, International.pm, and WebGUI.pm allow remote attackers to execute arbitrary Perl code. This is a remote code execution risk on WebGUI installations exposed to an attacker; explo...

PT-2005-3703 · Plain Black · Webgui

Name of the Vulnerable Software and Affected Versions: WebGUI versions prior to 6.7.3 Description: The issue allows remote attackers to execute arbitrary Perl code via multiple eval injection vulnerabilities in the following modules: 1 Help.pm, 2 International.pm, or 3 WebGUI.pm. Recommendations:...