7 matches found
EUVD-2004-2339
Malware in sbrugna...
Leif M. Wright ad.cgi 1.0 Unchecked Input Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2103/info ad.cgi is an ad rotation script freely available, and written by Leif Wright. A problem exists in the script which may allow access to restricted resources. The problem occurs in the method in which the script...
Leif Wright Web Blog blog.cgi ViewFile Request file Parameter Arbitrary Command Execution
The remote host is running LeifWright's blog.cgi - a CGI designed to handle personal web logs or 'blogs'. There is a bug in this software that could allow an attacker to execute arbitrary commands on the remote web server with the privileges of the web user. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2001-0023
CVE-2001-0023 affects the everythingform.cgi CGI program by Leif Wright. It allows a remote attacker to execute arbitrary commands via shell metacharacters in the config parameter. The available documents do not specify affected versions, root cause details beyond this description, or any provide...
CVE-2001-0024
The CVE-2001-0024 entry concerns the simplestmail.cgi CGI program by Leif Wright, where remote attackers can execute arbitrary commands via shell metacharacters in the MyEmail parameter. This is a remote command execution flaw with high impact (as per NVD) and network attack vector; no concrete e...
CVE-2001-0022
CVE-2001-0022 affects the simplestguest.cgi CGI program by Leif Wright, allowing remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter. The NVD entry assigns a CVSS v2 base score of 10.0 (HIGH) with network access, low attack complexity, no authenticat...
CVE-2001-0025
CVE-2001-0025 affects the ad.cgi CGI program by Leif Wright. The vulnerability allows remote arbitrary command execution via shell metacharacters in the file parameter, with the CGI typically running under web server privileges (often root or nobody). The issue is documented in multiple sources (...