Webmin Help Template Authenticated Remote Code Execution

Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...

CVE-2005-3269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for 1 Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, 2 Red Hat Directory Server and 3 Certificate Server before 7.1 SP1, 4 Sun ONE Directory Server 5.1 SP4 and earlier, and 5 Sun ONE Administration Serv...

CVE-2001-0360

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. dot dot attack in the helpon parameter...

CVE-2001-0360

The CVE-2001-0360 entry describes a directory traversal flaw in Ikonboard 2.1.7b and earlier, where help.cgi process accepts a malformed helpon parameter containing .. to read arbitrary files. The affected software is Ikonboard; the vulnerable component is help.cgi; root cause is improper validat...

CVE-2001-0360: Undefined Security Weakness

Directory traversal vulnerability in help.cgi in Ikonboard 2.1.7b and earlier allows a remote attacker to read arbitrary files via a .. dot dot attack in the helpon parameter...

Ikonboard v2.1.7b "show files" vulnerability

Product: Ikonboard - Version: 2.1.7b - OS: Unix, NT - Vendor: Notified, http://www.ikonboard.com -= Summary =- This is another bug in the Ikonboard. Anyone can read any file on the remote system with the privileges of the web server. -= Problem =- File: help.cgi ---L.44--- $inhelpon = $query -...