9786 matches found
CCBILL CGI Remote Exploit for whereami.cgi (ccbillx.c)
No description provided by source. / ===================================== CCBILL CGI Remote Exploit for /ccbill/whereami.cgi By: Knight420 7/07/03 spawns a shell with netcat and attempts to connect into the server on port 6666 to gain access of the webserver uid C COPYRIGHT Blue Ballz , 2003 all...
CCBILL CGI - 'ccbillx.c' 'whereami.cgi' Remote Code Execution
/ ===================================== CCBILL CGI Remote Exploit for /ccbill/whereami.cgi By: Knight420 7/07/03 spawns a shell with netcat and attempts to connect into the server on port 6666 to gain access of the webserver uid C COPYRIGHT Blue Ballz , 2003 all rights reserved...
CGI bugs
No description provided...
CGI bugs
No description provided...
FoxWeb 2.5 - PATH_INFO Remote Buffer Overrun
FoxWeb 2.5 - PATHINFO Remote Buffer Overrun source: https://www.securityfocus.com/bid/8547/info FoxWeb is prone to a remotely exploitable buffer overrun vulnerability. This is due to insufficient bounds checking of user-supplied PATHINFO data to the Foxweb CGI and ISAPI extension. Successful...
Sambar Server Multiple CGI Environment Variable Disclosure
The remote web server appears to be Sambar Server and makes available the 'environ.pl' and/or 'testcgi.exe' CGI scripts. These are included by default and reveal the server's installation directory along with other information that could prove useful to an attacker. Note that this version is also...
XSS Vulnerability in LedNews (CGI/Perl) v0.7
XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...
CGI bugs
No description provided...
pMachine <= 2.2.1 Multiple Vulnerabilities
The remote host is running a version of pMachine that is affected by two flaws : - It is vulnerable to multiple path disclosure problems that could allow an attacker to gain more knowledge about this host. - It is vulnerable to a cross-site-scripting attack that could allow an attacker to steal t...
pod.board 1.1 Multiple Script XSS
The remote host is hosting the Pod.Board CGI suite, a set of PHP scripts designed to manage online forums. There is a cross-site scripting issue in this suite that could allow an attacker to steal the cookies of your legitimate users, by luring them into clicking on a rogue URL. %NASLMINLEVEL 703...
lednews.txt
XSS Vulnerability in LedNews CGI/Perl v0.7 URL: http://www.ledscripts.com/index.php?page=free:perl:lednews Description ======= LedNews is a CGI application written entirely in perl. Its designed to be as simple as possible, but very powerful at the same thing. Vulnerability ======== The script do...
Psunami.CGI Command Execution
The remote host is hosting Psunami.CGI There is a flaw in this CGI which allows an attacker to execute arbitrary commands with the privileges of the HTTP server by making a request like : /psunami.cgi?action=board&board=1&topic=|id| %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Multiple Dangerous CGI Script Detection
It is possible that the remote web server contains one or more dangerous CGI scripts. Note that this plugin does not actually test for the underlying flaws but instead only searches for scripts with the same name as those with known vulnerabilities. %NASLMINLEVEL 70300 This script was written by...
CVE-2003-0217
Cross-site scripting XSS vulnerability in Neoteris Instant Virtual Extranet IVE 3.01 and earlier allows remote attackers to insert arbitrary web script and bypass authentication via a certain CGI script...
Infinity CGI Exploit Scanner Multiple Vulnerabilities
The remote is running Infinity Exploit Scanner, a web-based CGI vulnerability scanner implemented in perl and stored under the name 'nph-exploitscanget.cgi'. There is a flaw in this CGI that lets an attacker execute arbitrary commands on this host. In addition to this, there is a flaw in this CGI...
Infinity CGI Exploit Scanner 3.11 - Cross-Site Scripting
Infinity CGI Exploit Scanner 3.11 - Cross-Site Scripting source: https://www.securityfocus.com/bid/7910/info Infinity CGI Exploit Scanner is reported to be prone to a cross-site scripting vulnerability. An attacker could exploit this issue to creating a malicious link to a site hosting the softwa...
Infinity CGI Exploit Scanner 3.11 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/7910/info Infinity CGI Exploit Scanner is reported to be prone to a cross-site scripting vulnerability. An attacker could exploit this issue to creating a malicious link to a site hosting the software that contains hostile HTML and script code. If this li...
CGIScript.net csNews.cgi Advanced Settings Multiple Parameter Arbitrary File Retrieval
The CSNews.cgi exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can submit a specially crafted web form, which can display the 'setup.cgi' file that contains the superuser name and password. %NASLMINLEVEL 70300 This script was written by John...
Netwin WebNews Webnews.exe Remote Overflow
The remote host appears to be running WebNews, which offers web-based access to Usenet news. Some versions of WebNews are prone to a buffer overflow when processing a query string with an overly-long group parameter. An attacker may be able to leverage this issue to execute arbitrary shell code o...
Behold! Software counter.exe Malformed HTTP Request Counter Log DoS
The CGI 'counter.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker may make use of this file to gain access to confidential data or escalate their privileges on the web server. %NASLMINLEVEL 70300 This script was written by John...