CVE-2012-1795: Improper Neutralization of Special Elements used in an OS Command

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5114

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5112

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

Cross site scripting

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

Directory traversal

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2012-1787

CVE-2012-1787 describes multiple cross-site scripting (XSS) vulnerabilities in Webglimpse’s wgarcmin.cgi script for version 2.20.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying crafted values in the (1) URL, (2) FILE, or (3) DOMAIN parameters, e...

CVE-2009-5114

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5113

The CVE-2009-5113 entry describes a cross-site scripting (XSS) vulnerability in WebGlimpse, specifically in the wgarcmin.cgi component of WebGlimpse 2.18.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. The available sources (NVD/NVD m...

CVE-2009-5112

CVE-2009-5112 affects WebGlimpse (version 2.18.7 and earlier). The issue allows remote attackers to disclose the installation path via a crafted request to wgarcmin.cgi. The description provided does not include exploit specifics beyond this disclosure vector. No patched version or remediation de...

CVE-2009-5112

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

CVE-2009-5114

WebGlimpse 2.18.7 and earlier is affected by a directory traversal vulnerability in wgarcmin.cgi that allows remote attackers to read arbitrary files via a .. in the DOC parameter. Affected component is WebGlimpse, version 2.18.7 and prior; root cause CWE-22 (path traversal). Impact per sources: ...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

Brute Force и XSS уязвимости в Webglimpse

Здравствуйте 3APA3A! После предыдущих многочисленных Cross-Site Scripting, Full path disclosure, Directory Traversal и Authorization bypass уязвимостей в Webglimpse SecurityVulns ID: 9436, 9443, 9778, 9876, сообщаю вам о найденных мною новых уязвимостях в Webglimpse. Это Brute Force и Cross-Site...

CVE-2012-1787: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 URL, 2 FILE, or 3 DOMAIN parameters...

CVE-2009-5114: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5112: Exposure of Sensitive Information to an Unauthorized Actor

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

CVE-2009-5113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

WebGlimpse 2.x - wgarcmin.cgi Full Path Disclosure

WebGlimpse 2.x - wgarcmin.cgi Full Path Disclosure source: https://www.securityfocus.com/bid/52646/info WebGlimpse is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable...

WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure

source: https://www.securityfocus.com/bid/52646/info WebGlimpse is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. WebGlimpse 2.18.7 is vulnerable; other versio...