EUVD-2001-0554

Malware in sbrugna...

Drummond Miles A1Stats 1.0 a1disp3.cgi Traversal Arbitrary File Read

No description provided by source. source: http://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An...

Drummond Miles A1Stats 1.0 a1disp2.cgi Traversal Arbitrary File Read

No description provided by source. source: http://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An...

Drummond Miles A1Statistics a1disp4.cgi Traversal Arbitrary File Read

Binary data 1639.prm...

CVE-2001-0562

a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...

CVE-2001-0561

Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' dot dot attack in 1 a1disp2.cgi, 2 a1disp3.cgi, or 3 a1disp4.cgi...

CVE-2001-0562

CVE-2001-0562 affects the a1disp.cgi component of Drummond Miles A1Stats prior to version 1.6. The initial description documents a remote command execution vulnerability where a crafted URL containing shell metacharacters can force the execution of arbitrary commands on the server. The impact is ...

CVE-2001-0562

a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters...

CVE-2001-0561

CVE-2001-0561 affects Drummond Miles A1Stats prior to 1.6, via directory traversal in a1disp2.cgi, a1disp3.cgi, or a1disp4.cgi. The underlying issue is a dot-dot (.. ) traversal that allows reading arbitrary files, as documented in the initial entry. Connected Nessus plugins include multiple item...

Advisory for A1Stats

Advisory for A1Stats A1Stats is made by Drummond Miles Site: http://www.gadnet.com/a1stats by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0114 /-|=explanation=|- A1Stats is a CGI package to track website traffic. The package has a view files bug and also gives the...