Command injection

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640...

Command injection

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671...

Command injection

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659...

Command injection

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31685...

CVE-2011-0375

Cisco TelePresence endpoint devices running software 1.2.x–1.6.x are affected by a CGI Command Injection vulnerability (CVE-2011-0375) in the CGI implementation, requiring a remote, authenticated attacker to submit a malformed request to impact the device. The Cisco advisory lists multiple concur...

CVE-2011-0372

Cisco TelePresence endpoint devices running software 1.2.x–1.5.x are affected by CVE-2011-0372 due to an unauthenticated CGI access vulnerability that enables remote command execution via malformed CGI requests (command injection). The issue stems from the CGI implementation on affected Cisco Tel...

CVE-2011-0382

The CGI subsystem on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 allows remote attackers to execute arbitrary commands via a request to TCP port 443, related to a "command injection vulnerability," aka Bug ID CSCtf97221...

CVE-2011-0375

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCth24671...

CVE-2011-0372

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31640...

CVE-2011-0374

The CGI implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote authenticated users to execute arbitrary commands via a malformed request, related to "command injection vulnerabilities," aka Bug ID CSCtb31659...

CVE-2011-0373

Cisco TelePresence endpoint devices running 1.2.x–1.5.x are affected by CVE-2011-0373 (CGI Command Injection) due to a malformed CGI request over HTTPS (port 443). An authenticated remote attacker could execute arbitrary commands with elevated privileges on vulnerable endpoints. The Cisco advisor...

CVE-2011-0374

The CVE-2011-0374 entry corresponds to a Cisco TelePresence endpoint CGI Command Injection vulnerability affecting software 1.2.x–1.5.x. The advisory lists this defect under CSCtb31659 and confirms it as a CGI command injection vulnerability exploitable by a remote, authenticated attacker over th...

CVE-2011-0382

CVE-2011-0382 is a CGI Command Injection vulnerability in Cisco TelePresence Recording Server 1.6.x prior to 1.6.2. An unauthenticated attacker can trigger remote command execution via a crafted request to port 443. The Cisco advisory maps this to bug CSCtf97221 and lists the affected versions; f...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

HP OpenView NNM nnmRptconfig.exe schdParams and nameParams Buffer Overflow (CVE-2011-0267)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in the HP OpenView...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

F-Secure Internet Gatekeeper Default Administrator Credentials

The remote F-Secure Internet Gatekeeper install uses a default set of credentials 'admin' / 'admin' to control access to its Web Console. With this information, an attacker can gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...