JVN#33179297: Enisys Gw vulnerable to arbitrary file creation

Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a vulnerability that may allow a remote attacker to create arbitrary files. Impact An arbitrary file created by a logged in attacker may result in arbitrary code being executed on the server. Solution...

IceWarp 10.4.5 /rpc/gw.html 任意文件读取漏洞

No description provided by source...

dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities

Document Title: =============== dotProject GW v2.1.5 - Multiple SQL Injection Vulnerabilities Release Date: ============= 2011-07-24 Vulnerability Laboratory ID VL-ID: ==================================== 83 Product & Service Introduction: =============================== dotProject is a PHP...

Ceica-GW - login.php Cross-Site Scripting

Ceica-GW - login.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40917/info Ceica-GW is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Ceica-GW - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40917/info Ceica-GW is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...

Ceica-GW 1.5 Cross Site Scripting

======================================================================= Ceica-GW 1.5 XSS/HTML Multiple Vulnerabilities ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Linux Kernel < 2.6.22 - 'ftruncate()'/'open()' Local Privilege Escalation

/ gw-ftrex.c: Linux kernel bug information: http://osvdb.org/49081 !!!This is for educational purposes only!!! To use it, you've got to find a sgid directory you've got permissions to write into obviously world-writable, e.g: find / -perm -2000 -type d 2/dev/null|xargs ls -ld|grep "rwx" which...

The CMWAP of the test-vulnerability warning-the black bar safety net

Author: demonalex Source: demonalex the diary of a madman 1 test ARP. The first test is the BAN of inspiration, in the CMWAP under the ARP test, but through the GPRS into the CMWAP is the PPP Protocol with the ARP in different Protocol stacks, so the ARP in GPRS connected to the CMWAP is not...

CVE-2007-2171

Summary: CVE-2007-2171 is a stack-based overflow in the base64_decode function of Novell GroupWise WebAccess, specifically in GWINTER.exe, exploited via overly long Base64 content in an HTTP Basic Authentication request. Affected product/component: Novell GroupWise WebAccess (GWINTER.exe) prior t...

Unfixed XSS vulnerability at www.tennis-gw-baden-baden.de

Security researcher BackDoor, has submitted on 04/11/2007 a cross-site-scripting XSS vulnerability affecting www.tennis-gw-baden-baden.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It i...

Unfixed XSS vulnerability at gw-unser-clan.de

Security researcher Cyber-Unity, has submitted on 20/03/2007 a cross-site-scripting XSS vulnerability affecting gw-unser-clan.de, which at the time of submission ranked 1292855 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/03/2007. It is...

Buffer overflow

Buffer overflow in the cmdusr function in ftp-gw in TIS Internet Firewall Toolkit FWTK allows remote attackers to execute arbitrary code via a long destination hostname dest...

CVE-2007-0201

Buffer overflow in the cmdusr function in ftp-gw in TIS Internet Firewall Toolkit FWTK allows remote attackers to execute arbitrary code via a long destination hostname dest...

CVE-2007-0201

The CVE refers to CVE-2007-0201 in the TIS Internet Firewall Toolkit (FWTK) ftp-gw. A buffer overflow in the cmd_usr function allows remote attackers to execute arbitrary code by supplying a long destination hostname (dest). This yields a high-severity, network-exploitable condition with potentia...

GWScript2.50.txt

http://sx02.coresec.de/advisories/153.txt GW Script 2.50 Homepage: http://sentinel.rdw-allianz.de/downloads.php Affected Version: = 2.1.4 Patched Version: / Date: 23.09.2006 Application Risk: High Vendor notified : 23.09.2006 Vulnerable found : Sx02 http://sx02.coresec.de Vulnerable code in...

CVE-2000-0950

CVE-2000-0950 affects the x-gw component of the TIS Firewall Toolkit (FWTK). The root cause is a format string vulnerability in x-gw that allows local users to execute arbitrary commands via a malformed display name. Impact as described: complete confidentiality, integrity, and availability could...

FWTK x-gw Security Advisory [GSA2000-01]

geekgang Security Advisory gsa2000-01 www.geekgang.co.uk © Copyright 2000 geekgang ID: geekgang GSA2000-01 01 v1.0 Topic: FWTK x-gw format bug Status: Release 26th October, 2000 Author: pre Credit: Pekka Savola found the potential problem in the code Abstract The x-gw X Windows gateway component ...

Possible remote vulnerability problem in TIS FWTK x-gw?

Hello all, I got around to checking out TIS FWTK for format string problems. It's a free-for-non-commercials firewall proxy package. The sources etc. can be obtained from http://www.tis.com/research/software/fwtkreadme.html. Tried to contact [email protected], mail bounced. Oh well. This is usuall...