auctiontransportation.com XSS vulnerability

Open Bug Bounty ID: OBB-68721 Description| Value ---|--- Affected Website:| auctiontransportation.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

CVE-2004-1888

CVE-2004-1888 affects Aborior Encore WebForum: the display.cgi component allows remote command execution through shell metacharacters in the file parameter. The vulnerability is network‑level with no authentication required per the description, enabling an attacker to run arbitrary commands with ...

CVE-2004-1888: Undefined Security Weakness

display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable...

Abrior.txt

================================================================== Product : Abrior's Encore WebForum Versions : Unchecked maybe version I Bug : Remote Command Execution via Display.cgi Impact : Attackers can execute remote command Risk : Medium/High Date : April 3, 2004 Bug found by : k159 from...