Acme thttpd and mini_httpd Terminal Escape Sequence in Logs Command Injection Vulnerability

Acme SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100447";...

Cherokee Terminal Escape Sequence in Logs Command Injection Vulnerability

Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AOLServer Terminal 4.5.1 - Escape Sequence in Logs Command Injection

AOLServer Terminal 4.5.1 - Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37712/info AOLServer is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute...

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute...

Orion Application Server 2.0.7 - Terminal Escape Sequence in Logs Command Injection

Orion Application Server 2.0.7 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37717/info Orion Application Server is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can...

mini_httpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection

minihttpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploi...

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection source: https://www.securityfocus.com/bid/37716/info Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary comman...

thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection

thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit...

BOA Web Server 0.94.x - Terminal Escape Sequence in Logs Command Injection

BOA Web Server 0.94.x - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37718/info Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to...

Yaws 1.55 - 'Logs' Terminal Escape Sequence Command Injection

source: https://www.securityfocus.com/bid/37716/info Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Yaws 1.85 is vulnerable; other versions ma...

Cherokee 0.99.30 - Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37715/info Cherokee is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Cherokee 0.99.30 and prior are...

Varnish 2.0.6 - 'Terminal Escape Sequence in Logs' Command Injection

source: https://www.securityfocus.com/bid/37713/info Varnish is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Varnish 2.0.6 is vulnerable; other...

mini_httpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. This issue...

thttpd 2.24 - HTTP Request Escape Sequence Terminal Command Injection

source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. This issue...

Re: MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface

MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface ======================================================================== Affected Products - MailScan for Mail Servers Version: 5.6.a with espatch1 Win32 Platform Other Mailscan Products, Versions, also, if available for oth...

mailscan-multi.txt

MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface ======================================================================== Affected Products Product/Company Information Vulnerabilities Directory Traversal It is possible to access files on the system outside of the webroot...

Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very...

Debian Security Advisory DSA 1205-2 (thttpd)

The remote host is missing an update to thttpd announced via advisory DSA 1205-2. Marco d'Itri discovered that thttpd, a small, fast and secure webserver, makes use of insecure temporary files when its logfiles are rotated, which might lead to a denial of service through a symlink attack. The...

nmdeluxe-lfi.txt

Perl BeyazKurt [email protected] NMDeluxe 1.0.1 template Local File Inclusion Exploit D0rk : "powered by NMDeluxe" dorka gerenk yok ama nese :p Dün trojen yedim a.q ! baka türlü yapamaz zate lamerler Download : http://wsdeluxe.com/nmdeluxe/downloads.html Your Name & Site URL :p Coded by elden...

NMDeluxe 1.0.1 (footer.php template) Local File Inclusion Exploit

No description provided by source. Perl BeyazKurt [email protected] NMDeluxe 1.0.1 template Local File Inclusion Exploit D0rk : "powered by NMDeluxe" dorka gerenk yok ama nese :p Dün trojen yedim a.q ! baka türlü yapamaz zate lamerler Download : http://wsdeluxe.com/nmdeluxe/downloads.html You...