EUVD-2000-1146

Malware in sbrugna...

CVE-2002-1867: Undefined Security Weakness

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to 1 admin/setup.cgi, which allows remote attackers to create an administrative account, or 2 admin/nph-build.cgi, which allows remote attackers to cause a denial of service CPU consumption...

CVE-2002-1334: Undefined Security Weakness

Cross-site scripting XSS vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via 1 the direct parameter in imageFolio.cgi, or 2 nph-build.cgi...

CVE-2000-1161

CVE-2000-1161 concerns AdCycle banner management: the build.cgi CGI is left in a web-accessible directory, enabling remote attackers to execute the program and access or delete the AdCycle databases. Connected sources corroborate the issue and describe a remediation: remove build.cgi from /cgi-bi...

CVE-2000-1161

The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases...

CVE-2000-1161: Undefined Security Weakness

The installation of AdCycle banner management system leaves the build.cgi program in a web-accessible directory, which allows remote attackers to execute the program and view passwords or delete databases...