CVE-2009-1589

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors...

CVE-2009-1591

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

CVE-2009-1588

Cross-site scripting XSS vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1590

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...

Design/Logic Flaw

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors...

CVE-2009-1589

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors...

CVE-2009-1590

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...

CVE-2009-1591

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

CVE-2009-1588

Cross-site scripting XSS vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1589

MiniBBS22 from CGI RESCUE contains a vulnerability that allows unauthorized email transmission to arbitrary recipients. Affected product: MiniBBS22 (CGI RESCUE) prior to version 1.01 (CE: v1.00 explicitly listed by sources). Root cause/details on the exact vectors are not clearly stated across th...

CVE-2009-1590

CVE-2009-1590 concerns CGI RESCUE FORM2MAIL prior to 1.42, where a vulnerability in an HTML form-enabled mailer allows a remote attacker to cause arbitrary recipient emails to be sent. Connected sources (JVN/JVNDB, Red Hat, NVD) confirm: FORM2MAIL could send emails independent of configuration, e...

CVE-2009-1588

CVE-2009-1588 is a cross-site scripting (XSS) vulnerability in CGI RESCUE MiniBBS used by CGI RESCUE. The flaw affects MiniBBS versions prior to: v10.31 (10.x line), v9.07, v8.94, and v8t 8.93t, with older listings in other sources. An attacker can cause arbitrary script execution in a user’s bro...

CVE-2009-1591

CVE-2009-1591 affects CGI RESCUE Web Mailer prior to 1.04, where CRLF sequences in an unspecified web form enable HTTP header injection, enabling cross-site scripting (XSS) or HTTP response splitting. Public documentation consistently identifies Web Mailer v1.03 and earlier as affected. The under...

CVE-2009-1588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1589: Undefined Security Weakness

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors...

CVE-2009-1590: Undefined Security Weakness

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...

CVE-2009-1591: Improper Neutralization of Input During Web Page Generation

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Xitami Server Detection

Detection of Xitami Server. This script tries to detect an installed Xitami Server and its version. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Nagios External Commands and Adaptive Commands Unspecified Vulnerability

Nagios is prone to an unspecified vulnerability related to the CGI submission of external commands and the processing of adaptive commands. The issue affects versions prior to Nagios 3.0.6. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced...