9881 matches found
Sambar Server Multiple Script Arbitrary Code Execution
At least one of these CGI scripts is installed : hello.bat echo.bat They allow any attacker to execute commands with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10246;...
ultimatebb.txt
Hello. Writing cgi scripts in perl is simple. It's also rather safe, providing authors follow very simple instructions. But they don't. Browsing some site, I found that their forums were based not on home- made scripts, but rather commercial software product. Hey, said I to myself, remember those...
rcgixploit.c.txt
/ DESIGNER: ZinCShC E-Mail: [email protected] DATE: Mon Feb 14 15:28:19 GMT+2 2000 @601 MADE ON: linux SLackWarE.- GREETINGS: Packo, BlackSouL.- COMPILE: gcc -o rcgix rcgixploit.c DESCRIPTION: Remote Cgi Exploit, looking For PHF ,PHP ,HANDLER ,UPTIME, FINGER and try to Collect Useful FILES such ...
Zeus Web Server Null Byte Request CGI Source Disclosure
The remote host is running the Zeus Web Server. Versions 3.1.x to 3.3.5 of this web server are vulnerable to a bug that allows an attacker to view the source code of CGI scripts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
zeus.null.txt
This morning Zeus Technology Limited was informed of a serious security bug in the Zeus Webserver by 'The Relay Group' http://relaygroup.com. This document describes the scope of the problem and its solution. Versions affected ----------------- Zeus 3.1.x / 3.3.x Severity -------- High- this bug...
CVE-2000-0149
Zeus web server allows remote attackers to view the source code for CGI programs via a null character %00 at the end of a URL...
CVE-2000-0122
CVE-2000-0122 affects FrontPage Server Extensions. A remote attacker can determine the physical path of a virtual directory by issuing a GET to htimage.exe, leading to information disclosure about server layout. The provided records do not specify affected versions, exact vulnerable component det...
Zeus Web Server 3.x - Null Terminated Strings
source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in directories which are designated as executable eg...
Zeus Web Server 3.x - Null Terminated Strings
Zeus Web Server 3.x - Null Terminated Strings source: https://www.securityfocus.com/bid/977/info Appending "%00" to the end of a CGI script filename will permit a remote client to view full contents of the script if the CGI module option "allow CGIs anywhere" is enabled. Scripts located in...
CVE-1999-0287
Vulnerability in the Wguest CGI program...
CVE-1999-0604
An incorrect configuration of the WebStore 1.0 shopping cart CGI program "webstore.cgi" could disclose private information...
CVE-1999-0283
The CVE-1999-0283 issue is described across connected records as a vulnerability in the Java Web Server where remote users could obtain the source code of CGI programs. The materials confirm the affected system (Java Web Server) and the exposure (source disclosure via remote access). No specific ...
CVE-1999-0610
CVE-1999-0610 concerns a misconfiguration in the Webcart CGI program that can disclose private information. Affected component: Webcart CGI; root cause: incorrect configuration. Exposed locations include world-readable files/directories under /webcart and /webcart-lite (e.g., orders/, carts/, con...
CVE-1999-0509
CVE-1999-0509 describes remote arbitrary-command execution when shell interpreters (Perl, sh, csh, etc.) are installed in the web server’s /cgi-bin directory. The underlying issue is CGI scripts running with the server’s privileges, enabling attackers to execute commands. Affected scenario: a WWW...
CVE-2000-0074
The vulnerability CVE-2000-0074 affects PowerScripts PlusMail CGI. The PlusMail CGI allows remote command execution via a password file with improper permissions on the server side. Affected component: PlusMail CGI in PowerScripts. Impact per sources: potential remote command execution with netwo...
CVE-1999-0983
Whois Internic Lookup program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry...
CVE-2000-0074
PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...
CVE-1999-0606
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information...
CVE-1999-0609
CVE-1999-0609 concerns the SoftCart CGI program (SoftCart.exe). The connected records indicate an incorrect configuration that could disclose private information. There are multiple entries (NVD, Red Hat, CVE List) with identical descriptions, but no public details on affected versions, specific ...