DEBIAN-CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

CVE-2011-3361

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...

Cross site scripting

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

Cross site scripting

Cross-site scripting XSS vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than...

PT-2012-2000

Name of the Vulnerable Software and Affected Versions: BackupPC versions 3.0.0 through 3.2.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to "index.cgi", related to the log file viewer...

CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

CVE-2011-5081

Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...

CVE-2011-3361

CVE-2011-3361 is an XSS vulnerability in BackupPC 3.2.0 (and possibly earlier) exploitable via the num parameter in the browse action to index.cgi, implemented in CGI/Browse.pm. The issue allows remote attackers to inject arbitrary web script or HTML, with impact described as partial integrity an...

PT-2012-2059

Name of the Vulnerable Software and Affected Versions: BackupPC versions 3.1.0 through 3.2.1 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the share parameter in a "RestoreFile" action to "index.cgi". Recommendations: For versions 3.1...

PT-2012-1692

Name of the Vulnerable Software and Affected Versions: BackupPC versions prior to 3.2.1 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to "index.cgi". Recommendations: For versions prior to 3.2....

CVE-2011-5081

BackupPC (affected: 3.1.0, 3.2.1 and possibly earlier) contains an XSS vulnerability in RestoreFile.pm that can be triggered via the share parameter in a RestoreFile action to index.cgi, allowing remote attackers to inject arbitrary web script/HTML. The issue is documented as CVE-2011-5081. Sever...

CVE-2011-3361

Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...

CVE-2011-1937

CVE-2011-1937 affects Webmin versions up to 1.540. The vulnerability is a cross-site scripting (XSS) flaw that lets local users inject arbitrary script/HTML via the chfn command changing the real name field, related to the code paths useradmin/index.cgi and useradmin/user-lib.pl. Documented impac...

Ultimate eShop Error Based SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability Google Dork: inurl:index.cgi?aktion=shopview Date: 19/04/2011 Author: Romka Software Link: http://www.ultimate-eshop.de/ Tested on: Windows XP SP3 Exploit:...

Conversation for Exploration (Index.cgi) LFI Vulnerability

Exploit for php platform in category web applications ========================================================== Conversation for Exploration Index.cgi LFI Vulnerability ========================================================== Author: Net.Edit0r Email : email protected & email protected Script:...

cPanel Customer Portal (index.cgi) Xss Vulnerability

No description provided by source. http://localhost.cpanel.net/submit/index.cgi?step=&reqtype=sales&product= XSS http://127.0.0.1.cpanel.net/submit/index.cgi?step=&reqtype=sales&product= XSS "scriptalert"Inj3ct0r"/script "scriptalertdocument.cookie/script...

Sql injection

SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...

CVE-2008-1094

CVE-2008-1094 affects Barracuda Spam Firewall (BSF) before 3.5.12.007. A SQL injection exists in index.cgi (Account View) where the pattern_x parameter can be used with search_count_equals to inject arbitrary SQL, reportedly exploitable by remote authenticated administrators. Potential impacts in...

garment-lfi.txt

Discovered by Smasher + WarWolfz Crew. + http://warwolfz.altervista.org/ Hey wassup....i've found a vulnerability in Garmentcenter in index.cgi... PoC: /index.cgi?page=LFI Ex. http://site1.com/index.cgi?page=../../../../../../../../etc/passwd%00 Regards. Smasher...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...