EUVD-2005-4143

Malware in sbrugna...

EUVD-1999-0916

Malware in sbrugna...

Greg Matthews Classifieds.cgi 1.0 Hidden Variable Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2019/info Classifieds.cgi is a perl script part of the classifieds package by Greg Matthews which provides simple classified ads to web sites. Due to improper input validation it can be used to execute any command on the...

CVE-2005-4148: Undefined Security Weakness

Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error messa...

CVE-2000-1001: Undefined Security Weakness

add2basket.asp in Element InstantShop allows remote attackers to modify price information via the "price" hidden form variable...

CVE-1999-0937

BNBForm allows remote attackers to read arbitrary files via the automessage hidden form variable...

CVE-1999-0935: Undefined Security Weakness

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form...

PT-1999-1476 · Unknown · Classifieds.Cgi

Name of the Vulnerable Software and Affected Versions: classifieds.cgi affected versions not specified Description: The issue allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form. This can be done through the classifieds.cgi script...