CVE-2009-2322: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2258: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to list arbitrary directories via a .. dot dot in the nextpage parameter...

CVE-2009-2256: Improper Input Validation

The administrative web interface on the Netgear DG632 with firmware 3.4.0ap allows remote attackers to cause a denial of service web outage via an HTTP POST request to cgi-bin/firmwarecfg...

Command injection

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6555

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command...

CVE-2008-6556: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6557: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2008-6555: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command...

CVE-2008-6554: Improper Neutralization of Special Elements used in an OS Command

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

CVE-2009-0680: Improper Limitation of a Pathname to a Restricted Directory

cgi-bin/welcome/VPNonly in the web interface in Netgear SSL312 allows remote attackers to cause a denial of service device crash via a crafted query string, as demonstrated using directory traversal sequences...

i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability

Exploit for cgi platform in category web applications =============================================================== i-dreams GB 5.4 Final admin.dat File Disclosure Vulnerability ===============================================================...

CVE-2009-0545

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...

CVE-2009-0545: Improper Input Validation

cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action...

NaviCopa HTTP Server buffer overflow

Stack buffer overflow stack overrun on oversized request to cgi-bin directory. Script content leak with "." added to path...

HSPell 1.1 Command Execution

!/usr/bin/perl use IO::Socket; print q HSpell v1.1 Command Execution Exploit Theres a 1000 ways to improve this exploit, but I really couldn't be fucked with it. Made By ZeN http://dusecurity.com/ http://darkcode.me/ ; $host = 'site.com'; $port = '80'; $path = '/cgi-bin/cilla.cgi'; ShellMe: print...

HTMPL 1.11 - Command Execution

HTMPL 1.11 - Command Execution Software : HTMPL v1.11 Download Link : http://vmeste.org/templex/doc/1.html Vulnrability : Command Execution Severity : High Author : ZeN Website : http://dusecurity.com / http://darkcode.me/ Exploit : site.com/cgi-bin/htmpladmin.cgi?help=|cat /etc/passwd A few othe...

CVE-2008-5184: Undefined Security Weakness

The web interface cgi-bin/admin.c in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote attackers to bypass intended policy and conduct CSRF attacks via the 1 add and 2 cancel RSS subscription functions...

Ads Pro (dhtml.pl page) Remote Command Execution Exploit

No description provided by source. \Adspro Script Remote Command Execution/ Author S0l1D Script Adspro Homepage http://adspro.mhfmedia.com/index.shtm \Exploit/ http://serv.com/cgi-bin/adspro/dhtml.pl?page=adverttop.htm|id| http://serv.com/cgi-bin/adspro/dhtml.pl?page=advertlogin.htm|id|...

CVE-2008-3411: Improper Authentication

The Axesstel AXW-D800 modem with D2ETH10901VEBR Jun-14-2006 software does not require authentication for 1 etc/config/System.html, 2 etc/config/Network.html, 3 etc/config/Security.html, 4 cgi-bin/sysconf.cgi, and 5 cgi-bin/route.cgi, which allows remote attackers to change the modem's configurati...

CVE-2008-2835

CVE-2008-2835 affects IGSuite 3.2.4 with a SQL injection in cgi-bin/igsuite via the formid parameter, enabling remote attackers to execute arbitrary SQL commands. Public exploit references exist (Exploit-DB), but the provided documents do not include a remediation or patch details.