K-COLLECT CSV_DB.CGI 1.0/i_DB.CGI 1.0 - Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14059/info CSVDB.CGI/iDB.CGI are affected by a remote command execution vulnerability. Specifically, an attacker can supply arbitrary commands prefixed with the '|' character through the 'csvdb.cgi' script that will be...

PT-2014-3198

Name of the Vulnerable Software and Affected Versions Splunk versions prior to 5.0.5 Description The issue allows remote attackers to execute arbitrary commands, potentially leading to remote code execution. This is due to a directory traversal vulnerability in the collect script, which can be...

CVE-2006-3451

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets CSS, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3451: Improper Input Validation

Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets CSS, which allows remote attackers to execute arbitrary code via unspecified vectors...

[Full-disclosure] sendmail stuff2

written in a rush, pardon the mess ; not that ive gotten that far but here is my confirmed by mark to be close, thanks attack.... NOTE: ive just been informed that i need to fix something to makethis work, stand by. ALSO NOTE: the default timeout in collect is 1 hour, that means this exploit will...

Collect banner of unknown services

This plugin collect the banner from unknown/unidentified services. The actual reporting takes place in the separate VT SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New / improved code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

K-COLLECT CSV_DB / i_DB csv_db.cgi file Parameter Arbitrary Command Execution

The remote host is running K-COLLECT csv-database, a web application written in perl. The remote version of this software fails to sanitize user input to the 'file' parameter of the 'csvdb.cgi' script before using it to run a shell command. An unauthenticated can exploit this issue to execute...