415 matches found
FreeStyleWiki command injection vulnerability
Overview A cross-site scripting vulnerability exists in FreeStyleWiki's web management interface. Impact A user having FreeStyleWiki administrative privileges but with no web server administrative privileges could execute arbitrary code with privileges to execute CGI on the web server. Solution N...
BBSNote cross-site scripting vulnerability
Overview BBSNote, CGI bulletin board script, contains a cross-site scripting vulnerability due to improper handling of CGI arguments. Impact A malicious script may be executed on the user's web browser. Solution None...
CGI RESCUE WebFORM vulnerable to cross-site scripting
Overview WebFORM, released from CGI RESCUE, is a CGI script written in perl that allows a user to send email messages via a HTML form. WebFORM contains a cross-site scripting vulnerability. Impact An abitrary script may be executed on the user's web browser. Solution None...
DEBIAN-CVE-2007-6077
The session fixation protection mechanism in cgiprocess.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookieonly attribute from the DEFAULTSESSIONOPTIONS constant, which effectively causes cookieonly to be applied only to the first instantiation of CgiRequest, which allows remote...
Ruby CGI multipart parsing DoS
The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and...
CGI bugs
No description provided...
PT-2003-1879 · Apache · Apache +1
Name of the Vulnerable Software and Affected Versions: Apache versions prior to 2.0.48 Description: The issue arises from the mishandling of CGI redirect paths by mod cgid when a threaded Multi-Processing Module MPM is used. This could cause Apache to send the output of a CGI program to the wrong...
DEBIAN-CVE-2002-1592
The aplogrerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information...
Очередные ошибки в CGI
No description provided...
Очередные дырки в CGI
No description provided...
Очередные дырки в CGI
No description provided...
PT-1999-1407 · Unknown · Ultimate Bulletin Board
Name of the Vulnerable Software and Affected Versions: Ultimate Bulletin Board affected versions not specified Description: The issue allows remote attackers to view data files if an error occurs when the HTTP server attempts to execute the file, due to the storage of data files in the cgi-bin...
PT-1997-1103 · Apache · Apache Httpd
Name of the Vulnerable Software and Affected Versions: Apache httpd affected versions not specified Description: The issue allows attackers to read CGI programs due to a problem with the ScriptAlias directory in NCSA and Apache httpd. Recommendations: At the moment, there is no information about ...
PT-1996-1037 · Jj · Jj Cgi Program
Name of the Vulnerable Software and Affected Versions: jj CGI program affected versions not specified Description: The issue allows command execution via shell metacharacters in the jj CGI program. Recommendations: At the moment, there is no information about a newer version that contains a fix f...