CVE-2002-2109

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTPREFERER check and conduct unauthorized activities via 1 a blank referer, 2 a spoofed referer with a trusted domain/URL after the beginning of the referer, or 3 a spoofed referer with a trusted domain/URL in the beginni...

CVE-2001-1130: Undefined Security Weakness

Sdbsearch.cgi in SuSE Linux 6.0-7.2 could allow remote attackers to execute arbitrary commands by uploading a keylist.txt file that contains filenames with shell metacharacters, then causing the file to be searched using a .. in the HTTP referer from the HTTPREFERER variable to point to the...

Vulnerabilities in PGPMail.pl

-----BEGIN PGP SIGNED MESSAGE----- Vulnerabilities in PGPMail.pl Overview PGPMail.pl v1.31 is a PERL script that extends Matt Wright's FormMail v1.5 to encrypt HTML form data using PGP. It is available from ftp://ftp.venturablvd.com/pub/pgpmail/. Two vulnerabilities exist which allow a remote...

suse: sdbsearch.cgi vulnerability

Hello, I found weakness in sdbsearch.cgi script which is a part of Suse distribution. This is perl script and since Suse 7.1 they have introduced some form of protection interpreter is called with tainting checking. However, I think it isn't enough and this bug still may produce danger...