Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Mandriva Linux Security Advisory : perl-CGI (MDVSA-2010:237)

A new version of the CGI Perl module has been released to CPAN, which fixes several security bugs which directly affect Bugzilla these two security bugs where first discovered as affecting Bugzilla, then identified as being bugs in CGI.pm itself. The multipartinit function in 1 CGI.pm before 3.50...

HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmsnmp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

HP OpenView Network Node Manager (OV NNM) - 'ovalarm.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmovalarmlang.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmovwebhelp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

HP Systems Insight Manager Detection

HP Systems Insight Manager, a web-based application for managing remote systems, is installed on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid50541; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2021/03/22";...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web Common Credentials

Nessus was able to read protected web pages by using common login and password combinations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid50504; scriptversion"1.14";...

CGI Generic Path Traversal (quick test)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings and are affected by directory traversal or local files inclusion vulnerabilities. By leveraging this issue, an attacker may be able to read arbitrary files on the web server or execute commands. %NASLMINLEVEL...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

CGI Generic Padding Oracle

By manipulating the padding on an encrypted string, Nessus was able to generate an error message that indicates a likely 'padding oracle' vulnerability. Such a vulnerability can affect any application or framework that uses encryption improperly, such as some versions of ASP.net, Java Server Face...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Apache 2.2 Local Denial Of Service

!c:\perl\bin\ Exploit Title: Apache 2.2 local denail of service windows Date: 25/10/2010 Author: FB1H2S Software Link: http://httpd.apache.org/. Version: APACHE 2.2.16 Tested on: wINDOWS xP SERVICE PACK 3 CVE : Save the file as .pl in apache cgi-bin and Call this file from your browser and...

Apache 2.2 (Windows) Local Denial of Service

Exploit for windows platform in category dos / poc ============================================ Apache 2.2 Windows Local Denial of Service ============================================ !c:\perl\bin\ Exploit Title: Apache 2.2 local denail of service windows Date: 25/10/2010 Author: FB1H2S Software...

Apache 2.2 (Windows) - Local Denial of Service

!c:\perl\bin\ Exploit Title: Apache 2.2 local denail of service windows Date: 25/10/2010 Author: FB1H2S Software Link: http://httpd.apache.org/. Version: APACHE 2.2.16 Tested on: wINDOWS xP SERVICE PACK 3 CVE : Save the file as .pl in apache cgi-bin and Call this file from your browser and...

Apache 2.2 (Windows) - Local Denial of Service

Apache 2.2 Windows - Local Denial of Service !c:\perl\bin\ Exploit Title: Apache 2.2 local denail of service windows Date: 25/10/2010 Author: FB1H2S Software Link: http://httpd.apache.org/. Version: APACHE 2.2.16 Tested on: wINDOWS xP SERVICE PACK 3 CVE : Save the file as .pl in apache cgi-bin...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...