CVE-2014-4977: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Dell SonicWall Scrutinizer 11.0.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 selectedUserGroup parameter in a create new user request to cgi-bin/admin.cgi or the 2 userid parameter in the changeUnit function, 3 methodDeta...

ImageFolio 2.2x/3.0/3.1 Admin.CGI Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7828/info ImageFolio 'admin.cgi' has been reported prone to a directory traversal vulnerability. By supplying directory traversal sequences, as a URI parameter, to the 'admin.cgi' script an attacker may break out of the w...

MegaBook 2.0/2.1 Admin.CGI EntryID Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13522/info MegaBook is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

CVE-2012-2626: Improper Authentication

cgi-bin/admin.cgi in the web console in Plixer Scrutinizer aka Dell SonicWALL Scrutinizer before 9.5.0 does not require token authentication, which allows remote attackers to add administrative accounts via a userprefs action...

Fedora 11 : cups-1.4.2-7.fc11 (2009-10891)

Updated to 1.4.2 including XSS security fix CVE-2009-2820. Fixed improper reference counting in abstract file descriptors handling interface CVE-2009-3553. Fixed admin.cgi crash when modifying a class. Fix cups-lpd to create unique temporary data files. Pass through serial parameters correctly in...

Auto Manager admin.cgi Multiple Field XSS

vendor: interactivetools.com, inc., http://www.interactivetools.com/products/automanager/ product: Auto Manager version: 2.52 script: admin.cgi fields: Vehicle, Year, Price, Drive Train, Transmission, Body, Engine, Description, Color, Miles BugsNotHugs Shared Vulnerability Disclosure Account...

CVE-2009-2640: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in cgi/admin.cgi in Interlogy Profile Manager Basic allow remote attackers to execute arbitrary SQL commands via a pmadm cookie in 1 an edittemp action or 2 a users action...

MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications =============================================================== MRCGIGUY Amazon Directory 1.0/2.0 Insecure Cookie Handling Vuln ===============================================================...

MRCGIGUY Top Sites 1.0.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com MRCGIGU...

MRCGIGUY Message Box 1.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...

MRCGIGUY Message Box 1.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- Message Box Version 1.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz...

MRCGIGUY SimpLISTic SQL 2.0.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY SimpLISTic SQL 2.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.mrcgiguy.com...

CVE-2006-4104

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."...

CVE-2006-4104

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."...

CVE-2006-4104

The CVE-2006-4104 entry describes a Cross-site Scripting (XSS) vulnerability in MojoGallery’s admin.cgi. The underlying issue is an input handling flaw in the password input field that permits injection of arbitrary web script or HTML, enabling an attacker to potentially execute scripts in the co...

CVE-2006-4104: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."...

CVE-2006-4087

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4087

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4087

CVE-2006-4087 describes a cross-site scripting (XSS) vulnerability in the admin.cgi component of mojoGallery (mojoscripts.com). The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The NVD records a CVSSv2 base score of 4.3 (medium severity), wi...

CVE-2006-4087: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...