93 matches found
CVE-2010-4410
CRLF injection vulnerability in the header function in 1 CGI.pm before 3.50 and 2 Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline...
Perl CGI.pm Header Values Newline Handling Unspecified Security Vulnerability
Perl CGI.pm is prone to an unspecified security vulnerability related to handling of newlines embedded in header values. OpenVAS Vulnerability Test $Id: gbperlCGI45145.nasl 5323 2017-02-17 08:49:23Z teissa $ Perl CGI.pm Header Values Newline Handling Unspecified Security Vulnerability Authors:...
Perl CGI.pm Header Values Newline Handling Unspecified Security Vulnerability
Perl CGI.pm is prone to an unspecified security vulnerability related to handling of newlines embedded in header values. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Bugzilla < 3.2.10 / 3.4.10 / 3.6.4 Multiple Vulnerabilities
Binary data 5744.prm...
Perl CGI.pm MIME Boundary 'multipart_init' Unspecified Security Vulnerability
Perl CGI.pm is prone to an unspecified security vulnerability because the MIME part of the Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Solaris Update for S9 perl 5.005_03`s CGI.pm and Safe.pm modules 121997-02
Check for the Version of S9 perl 5.00503s CGI.pm and Safe.pm modules OpenVAS Vulnerability Test Solaris Update for S9 perl 5.00503s CGI.pm and Safe.pm modules 121997-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
Solaris Update for S9 perl 5.005_03`s CGI.pm and Safe.pm modules 121997-02
Check for the Version of S9 perl 5.00503s CGI.pm and Safe.pm modules OpenVAS Vulnerability Test Solaris Update for S9 perl 5.00503s CGI.pm and Safe.pm modules 121997-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
Solaris Update for S9 perl 5.005_03`s CGI.pm and Safe.pm modules 121996-01
Check for the Version of S9 perl 5.00503s CGI.pm and Safe.pm modules OpenVAS Vulnerability Test Solaris Update for S9 perl 5.00503s CGI.pm and Safe.pm modules 121996-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
Solaris Update for S9 perl 5.005_03`s CGI.pm and Safe.pm modules 121996-01
Check for the Version of S9 perl 5.00503s CGI.pm and Safe.pm modules OpenVAS Vulnerability Test Solaris Update for S9 perl 5.00503s CGI.pm and Safe.pm modules 121996-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is fr...
HTTP NIDS evasion
This plugin configures OpenVAS for NIDS evasion see the SPDX-FileCopyrightText: 2008 Michel Arboi / Renaud Deraison Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only The HTTP IDS evasion...
TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability
No description provided by source. -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution = 4.2.2-------------------- ----------developers site: http://www.twiki.org------------------- ----------CVE Ids : CVE-2008-3195--------------------------...
TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability
Exploit for cgi platform in category web applications =========================================================== TWiki header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ = undef; print ; closeF;...
TWiki 4.2.2 - action Remote Code Execution
TWiki 4.2.2 - action Remote Code Execution -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ =...
TWiki 4.2.2 - 'action' Remote Code Execution
-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ = undef; print ; closeF;...
TWiki 4.2.0 (configure) Remote File Disclosure Vulnerability
Exploit for cgi platform in category web applications ============================================================ TWiki 4.2.0 configure Remote File Disclosure Vulnerability ============================================================ TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian...
TWiki 4.2.0 (configure) Remote File Disclosure Vulnerability
No description provided by source. TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes Local : No Dat...
twiki-disclose.txt
TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes Local : No Date : 05/08/2008 Credits : Th1nk3r...
Debian Security Advisory DSA 371-1 (perl)
The remote host is missing an update to perl announced via advisory DSA 371-1. OpenVAS Vulnerability Test $Id: deb3711.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 371-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 371-1 (perl)
The remote host is missing an update to perl announced via advisory DSA 371-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[Full-disclosure] PacSec Hype Security Team: CGI.pm param injection
====================================================================== PacSec Hype Security Team param injection in CGI.pm and inheritors allows SQL injection and manipulation of data bypassing many perl web form validators ======================================================================...