524 matches found
CVE-2006-3312: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 linkprint, 2 linkupgrade, 3 linksql, 4 linknext, 5 linkprev, and 6 linklist parameters in top.inc as included by...
sysreport security update
CentOS Errata and Security Advisory CESA-2005:598 An updated sysreport package that fixes an insecure temporary file flaw is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Sysreport is a utility that gathers information about a...
CVE-2000-1131
CVE-2000-1131 concerns Bill Kendrick’s web site guestbook (GBook), where remote Command Execution is possible via shell metacharacters in the _MAILTO form variable. The vulnerability stems from improper handling of user-supplied input, enabling arbitrary commands to be run on the server. Reported...
CVE-2000-1131: Undefined Security Weakness
Bill Kendrick web site guestbook GBook allows remote attackers to execute arbitrary commands via shell metacharacters in the MAILTO form variable...