DCForum dcboard.cgi Multiple Vulnerabilities

The DCForum dcboard.cgi script is installed. This CGI has some well known security flaws, including one that lets an attacker execute arbitrary commands with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc...

Дырка в CGI dcforum

Можно получить доступ к любому файлу...

Cgisecurity.com advisory on dcforum

The staff of cgisecurity.com have found a remote input validation error in the dcforum cgi script. NOTE: The vendor was very quick to issue a patch on this and becuase of this i decided to release it so soon after finding it. Below is a paste of the advisory. -zenomorph Cgi Security Advisory 2...

DCForum 1-6 - Arbitrary File Disclosure

DCForum 1-6 - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/1951/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. The script improperly validates user-supplied input, which allows the remote viewing ...

DCForum 1-6 - Arbitrary File Disclosure

source: https://www.securityfocus.com/bid/1951/info DCForum is a commercial cgi script from DCScripts which is designed to facilitate web-based threaded discussion forums. The script improperly validates user-supplied input, which allows the remote viewing of arbitrary files on the host which are...