162 matches found
CVE-2011-5081
BackupPC (affected: 3.1.0, 3.2.1 and possibly earlier) contains an XSS vulnerability in RestoreFile.pm that can be triggered via the share parameter in a RestoreFile action to index.cgi, allowing remote attackers to inject arbitrary web script/HTML. The issue is documented as CVE-2011-5081. Sever...
CVE-2011-5081
Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...
CVE-2011-3361: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...
CVE-2011-3361
Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...
CVE-2011-4923
Cross-site scripting XSS vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than...
CVE-2011-4923: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than...
CVE-2011-5081: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...
CVE-2011-5081
Cross-site scripting XSS vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi...
CVE-2011-3361
Cross-site scripting XSS vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi...
CVE-2011-1937
CVE-2011-1937 affects Webmin versions up to 1.540. The vulnerability is a cross-site scripting (XSS) flaw that lets local users inject arbitrary script/HTML via the chfn command changing the real name field, related to the code paths useradmin/index.cgi and useradmin/user-lib.pl. Documented impac...
CVE-2011-1937: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real aka Full Name field, related to useradmin/index.cgi and useradmin/user-lib.pl...
PT-2011-3486
Name of the Vulnerable Software and Affected Versions Webmin versions 1.540 and earlier Description A cross-site scripting XSS issue allows local users to inject arbitrary web script or HTML via a chfn command that changes the real field, related to useradmin/index.cgi and useradmin/user-lib.pl...
Ultimate eShop Error Based SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Ultimate eShop Error Based SQL Injection Vulnerability Google Dork: inurl:index.cgi?aktion=shopview Date: 19/04/2011 Author: Romka Software Link: http://www.ultimate-eshop.de/ Tested on: Windows XP SP3 Exploit:...
Conversation for Exploration (Index.cgi) LFI Vulnerability
Exploit for php platform in category web applications ========================================================== Conversation for Exploration Index.cgi LFI Vulnerability ========================================================== Author: Net.Edit0r Email : email protected & email protected Script:...
cPanel Customer Portal (index.cgi) Xss Vulnerability
No description provided by source. http://localhost.cpanel.net/submit/index.cgi?step=&reqtype=sales&product= XSS http://127.0.0.1.cpanel.net/submit/index.cgi?step=&reqtype=sales&product= XSS "scriptalert"Inj3ct0r"/script "scriptalertdocument.cookie/script...
Sql injection
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...
CVE-2008-1094
CVE-2008-1094 affects Barracuda Spam Firewall (BSF) before 3.5.12.007. A SQL injection exists in index.cgi (Account View) where the pattern_x parameter can be used with search_count_equals to inject arbitrary SQL, reportedly exploitable by remote authenticated administrators. Potential impacts in...
CVE-2008-1094: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.cgi in the Account View page in Barracuda Spam Firewall BSF before 3.5.12.007 allows remote authenticated administrators to execute arbitrary SQL commands via a patternx parameter in a searchcountequals action, as demonstrated by the pattern0 parameter...
garment-lfi.txt
Discovered by Smasher + WarWolfz Crew. + http://warwolfz.altervista.org/ Hey wassup....i've found a vulnerability in Garmentcenter in index.cgi... PoC: /index.cgi?page=LFI Ex. http://site1.com/index.cgi?page=../../../../../../../../etc/passwd%00 Regards. Smasher...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.cgi in Site-Up 2.64 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search or 2 search mask field...