YaBB 9.1.2000 - Cross-Agent Scripting

YaBB 9.1.2000 - Cross-Agent Scripting source: https://www.securityfocus.com/bid/3828/info YaBB Yet Another Bulletin Board is freely available web forums/community software that is written in Perl. YaBB will run on most Unix/Linux variants, MacOS, and Microsoft Windows 9x/ME/NT/2000/XP platforms...

Дырка в NetBSD на процессорах Hitachi (privelege escalation)

Недостаточная проверка ввода пользователя в нескольких системных вазовах...

Solaris 2.52.67.08 - mailx -F Local Buffer Overflow (1)

Solaris 2.52.67.08 - mailx -F Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2610/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and...

datawizards ftpxq 2.0.93 - Directory Traversal

datawizards ftpxq 2.0.93 - Directory Traversal source: https://www.securityfocus.com/bid/2426/info FtpQX is a ftp daemon designed to provide ftp services for Microsoft Operating Systems. It is maintained and distributed by Datawizard Technologies. A problem in the software could allow access to...

Дырка в postaci (SQL query modification)

недостаточная проверка ввода пользователя дает возможность модифицировать SQL-запрос...

Leif M. Wright - ad.cgi 1.0 Unchecked Input

Leif M. Wright - ad.cgi 1.0 Unchecked Input source: https://www.securityfocus.com/bid/2103/info ad.cgi is an ad rotation script freely available, and written by Leif Wright. A problem exists in the script which may allow access to restricted resources. The problem occurs in the method in which th...

YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/1921/info YaBB Yet Another Bulletin Board is a popular perl-based bulletin board scripting package. search. pl, one of several perl scripts which comprise YaBB, fails to properly validate user input which arguments a call to open. A malicious user could...

Daniel Beckham The Finger Server 0.82 Beta - Pipe

Daniel Beckham The Finger Server 0.82 Beta - Pipe source: https://www.securityfocus.com/bid/974/info 'The Finger Server' is a perl script for providing .plan-like functionality through a website. Due to insufficient input checking it is possible for remote unauthenticated users to execute shell...