SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞

BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SiteScape Forum 'dispatch.cgi' Tcl命令注入漏洞

BUGTRAQ ID: 26963 CNCAN ID:CNCAN-2007122406 SiteScape Forum是一款基于CGI的WEB应用程序。 SiteScape Forum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'dispatch.cgi'脚本对用户提交的WEB参数处理缺少充分过滤，提交包含';'元字符作为参数数据，可导致以WEB权限执行TCL代码。 SiteScape Forum ZX SiteScape Forum ST 升级到最新版本：...

CVE-2007-6515

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...

CVE-2007-6515

CVE-2007-6515 : TCL injection in SiteScape Forum via support/dispatch.cgi where attacker-supplied code separator characters in the query string enable remote arbitrary TCL code execution. Connected sources document this as a TCL injection issue affecting SiteScape Forum/Enterprise Forum 7.x, with...

CVE-2006-2676

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

CVE-2006-2676

CVE-2006-2676 affects SiteScape Forum 7.2 and possibly earlier. The vulnerability involves Dispatch.cgi/_user/uservCard/ returning responses that differ in a way that allows remote attackers to enumerate valid usernames. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM), with network attac...