12680 matches found
CGILua 3.0 /publique/cgi/cgilua.exe/sys/start.htm SQL注入漏洞
No description provided by source...
PT-2013-4524
Name of the Vulnerable Software and Affected Versions Supermicro X9 generation motherboards with firmware before 3.15 SMT X9 315 Description The issue is related to multiple stack-based buffer overflows in the cgi/close window.cgi file within the web interface of the Intelligent Platform Manageme...
CVE-2013-3623: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in cgi/closewindow.cgi in the web interface in the Intelligent Platform Management Interface IPMI with firmware before 3.15 SMTX9315 on Supermicro X9 generation motherboards allow remote attackers to execute arbitrary code via the 1 sesssid or 2 ACT parameter...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
A Symantec researcher has discovered a new Linux worm, targeting machine-to-machine devices, and exploits a PHP vulnerability CVE-2012-1823 to propagate that has been patched as far back as May 2012. Linux worm, which has been dubbed Linux.Darlloz, poses a threat to devices such as home routers a...
Linux worm targeting Routers, Set-top boxes and Security Cameras with PHP-CGI Vulnerability
None...
Updated lighttpd packages fix multiple security vulnerbilities
Updated lighttpd packages fix security vulnerabilities: lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obtain sensitive information by sniffing the...
Cross site request forgery (csrf)
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...
CVE-2013-6826: Cross-Site Request Forgery (CSRF)
cgi-bin/module//sysmanager/admin/SYSAdminUserDialog in Fortinet FortiAnalyzer before 5.0.5 does not properly validate the csrftoken parameter, which allows remote attackers to perform cross-site request forgery CSRF attacks...
PT-2013-6135
Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions prior to 5.0.5 Description The issue is related to the improper validation of the csrf token parameter in the cgi-bin/module//sysmanager/admin/SYSAdminUserDialog endpoint. This allows remote attackers to perform cross-si...
About apache+php-cgi mod attack-vulnerability warning-the black bar safety net
One, the origin of: 1, the attack code International well-known vulnerabilities to attack the code release mechanism exploit-db released one for apache+php attack code, The authors of the famous international hacker Kingcope it. See http://www.exploit-db.com/exploits/29290/ Attacks effect derived...
NetGear router through command injection to obtain ROOT privileges[EXP]-vulnerability warning-the black bar safety net
! NetGear router through command injection to obtain ROOT privileges\EXP\ - ScriptALeRT - Minghacker /Article/UploadPic/2013-11/201311614443412.jpg Abroad a large cattle study found that the NetGear router wndr3700v4 firmware authenticate the existence of the vulnerability. Once the Web interface...
Supermicro Onboard IPMI CGI Vulnerability Scanner
This module checks for known vulnerabilities in the CGI applications of Supermicro Onboard IPMI controllers. These issues currently include several unauthenticated buffer overflows in the login.cgi and closewindow.cgi components. Module Options msf use auxiliary/scanner/http/smt/ipmicgiscanner ms...
Apache PHP-CGI Remote Code Execution
The PHP installation on the remote web server contains a flaw that could allow a remote attacker to pass command-line arguments as part of a query string to the PHP-CGI program. This could be abused to execute arbitrary code, reveal PHP source code, cause a system crash, etc. %NASLMINLEVEL 70300 ...
Apache / PHP 5.x Remote Code Execution Exploit
No description provided by source. / Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi package. When the php5-cgi...
Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution
Apache + PHP 5.3.12 5.4.2 - cgi-bin Remote Code Execution / Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi...
PSF-2013-3 CGI directory traversal (URL parsing)
An error in separating the path and filename of the CGI script to run in http.server.CGIHTTPRequestHandler allows running arbitrary executables in the directory under which the server was started...
Apache + PHP < 5.3.12 / < 5.4.2 - cgi-bin Remote Code Execution
/ Apache Magica by Kingcope / / gcc apache-magika.c -o apache-magika -lssl / / This is a code execution bug in the combination of Apache and PHP. On Debian and Ubuntu the vulnerability is present in the default install of the php5-cgi package. When the php5-cgi package is installed on Debian and...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
OpenJDK: RMI CGIHandler XSS issue (RMI, 6563318)
Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via vectors related to RMI. NOTE: the previous information...