Webfroot Shoutbox < 2.32 (Apache) - Local File Inclusion / Remote Code Execution

!/usr/bin/perl Webfroot Shoutbox ';fclose$h;? HTTP/1.1\nHost: 127.0.0.1\nConnection: Close\n\n"; my $conn; if $ARGV0 eq "x" || $ARGV0 eq "r" $type = $ARGV0; else print "x Webfroot Shoutbox 2.32 on apache exploit \n\n"; print "Usage: \n Webfroot.pl x|r host command path port\n"; print "\ttype\tx =...

CVE-2003-0083

CVE-2003-0083 affects Apache 1.3.x (before 1.3.25) and Apache 2.0.x (before 2.0.46). The issue is that terminal escape sequences are not filtered from access logs, enabling insertion of escape sequences into terminal emulators vulnerable to such sequences. This is a separate vulnerability from CV...

Дырка в pagelog &#40;traveral path&#41;

Можно обратиться к любому .log-Файлу в системе и создать .log и .txt файл в любом катклоге, т.к. CGI не проверяет обратный путь в директории...

Solaris AnswerBook2 - Remote Command Execution

source: https://www.securityfocus.com/bid/1556/info A vulnerability exists in version 1.4.2 and prior of the AnswerBook2 server from Sun. It is possible for remote users who have administrative access to execute arbitrary commands on the machine running AnswerBook2. These commands will be execute...

WebActive HTTP Server active.log Remote Information Disclosure

It is possible to obtain the remote WebActive logfile by requesting the file /active.log An attacker may use this to obtain valuable information about your site, such as who visits it and how popular it is. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription...

CVE-2000-0642

The default configuration of WebActive HTTP Server 1.00 stores the web access log active.log in the document root, which allows remote attackers to view the logs by directly requesting the page...

HP JetAdmin 1.0.9 Rev. D - symlink

source: https://www.securityfocus.com/bid/157/info A vulnerability exists in HP's JetAdmin Rev. D.01.09 software. Due to its failure to check if it is following a symbolic link, it is possible for an attacker to create a link from /tmp/jetadmin.log to anywhere on the filesystem, with permissions...