9913 matches found
Omnicron OmniHTTPD 1.1/2.4 Pro Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/739/info There is a remotely exploitable buffer overflow vulnerability in the CGI program imagemap, which is distributed with Omnicron's OmniHTTPD. During operations made on arguments passed to the program, a lack of boun...
HP OpenView Network Node Manager getnnmdata.exe (ICount) CGI Buffer Overflow
No description provided by source. $Id: hpnnmgetnnmdataicount.rb 12121 2011-03-24 00:49:33Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and...
Active Classifieds 1.0 Arbitrary Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2942/info Active Classifieds is a CGI package that provides an online classified advertisement listing and management system. An origin validation error exists in the Free Edition of Active Classifieds that may allow remo...
BB4 Big Brother Network Monitor 1.5 d2 bb-hist.sh HISTFILE Parameter File Existence Disclosure
No description provided by source. source : http://www.securityfocus.com/bid/1971/info Big Brother Network Monitor is a robust, feature rich network monitoring package produced by BB4 Technologies. A problem exists that can allow remote account guessing. The problem occurs in the Common Gateway...
Acme thttpd 1.9/2.0.x CGI Test Script Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9474/info thttpd is prone to a cross-site scripting vulnerability in the CGI test script. This could permit a remote attacker to create a malicious link to the web server that includes hostile HTML and script code. If thi...
Majordomo2 - Directory Traversal (SMTP/HTTP)
No description provided by source. Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google...
MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (3)
No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...
AWStats (6.4-6.5) migrate Remote Command Execution
No description provided by source. $Id: awstatsmigrateexec.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Philip Chinery's Guestbook 1.1 Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4566/info Philip Chinery's Guestbook is freely available guestbook software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Philip Chinery's Guestbook does not filter script...
MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (6)
No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...
Webmin 1.5 - Web Brute Force (cgi-version)
No description provided by source. !/usr/bin/perl use CGI qw:standard; use IO::Socket; $CGI::HEADERSONCE = 1; $CGI = new CGI; $atak = $CGI-paramatak; $host = $CGI-paramhost; $wlist = $CGI-paramwlist; $cmd = $CGI-paramcmd; print $CGI-header-type='text/html',-charset='windows-1254'; print...
Matt Wright FormMail 1.x Cross-Site Request Forgery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2080/info FormMail is a widely-used web-based e-mail gateway, which allows form-based input to be emailed to a specified user. A web server can use a remote site's FormMail script without authorization, using remote syste...
qDecoder 4.x/5.x Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2329/info Improperly validated user-supplied input to the Content-Type header can create an overflow condition. As a result, excessive data copied onto the stack can overwrite critical parts of the stack frame such as the...
Rit Research Labs TinyWeb 1.9.2 Unauthorized Script Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10445/info TinyWeb Server is affected by an unauthorized script disclosure vulnerability. This issue is due to an input validation error that allows malicious users to bypass standard web server rules. This issue will all...
ContentKeeper Web Appliance < 125.10 Command Execution
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
AWStats (6.1-6.2) configdir Remote Command Execution
No description provided by source. $Id: awstatsconfigdirexec.rb 7970 2009-12-26 03:31:20Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...
Seowonintech Routers <= fw: 2.3.9 - Remote Root File Disclosure
No description provided by source. !/usr/bin/perl + Seowonintech routers = fw: 2.3.9 remote root file dumper Author: Todor Donev todor dot donev at gmail.com Type: Hardware Platform: Linux Special greetz to Stiliyan Angelov, Tsvetelina Emirska and all my friends that support me 2013 Bulgaria use...
CoreHTTP 0.5.3.1 (CGI) - Arbitrary Command Execution Vulnerability
No description provided by source. Package name: CoreHTTP server Version: 0.5.3.1 and below as long as cgi support is enabled Software URL: http://corehttp.sourceforge.net/ Exploit: http://aconole.brad-x.com/programs/corehttpcgienabled.rb Issue: CoreHTTP server fails to properly sanitize input...
MS IIS 3.0/4.0/5.0 PWS Escaped Characters Decoding Command Execution (8)
No description provided by source. source: http://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before...
TalentSoft Web+ Client/Monitor/server 4.6 Internal IP Address Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to...