13 matches found
EUVD-2018-6346
Malware in sbrugna...
Path traversal
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...
CVE-2018-14429
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...
CVE-2018-14429
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...
CVE-2018-14429
CVE-2018-14429 affects man-cgi before 1.16. Summary: Local File Inclusion via absolute path traversal using a crafted cgi-bin/man-cgi? URL (example: /cgi-bin/man-cgi?/etc/passwd). Root cause: the script’s handling of the parameter leads to reading local files by calling the man command. Impact: i...
CVE-2018-14429
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...
PT-2018-12506
Name of the Vulnerable Software and Affected Versions man-cgi versions prior to 1.16 Description The issue allows Local File Inclusion via absolute path traversal. This can be demonstrated by accessing a URI such as "cgi-bin/man-cgi?/etc/passwd". Recommendations For versions prior to 1.16, update...
CVE-2018-14429: Improper Limitation of a Pathname to a Restricted Directory
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI...
man-cgi Local File Inclusion Vulnerability
Exploit for linux platform in category remote exploits man-cgi before 1.16 allows Local File Inclusion via absolute path traversal. If an Attacker provides a Filename as a Parameter e.g. https://example.org/cgi-bin/man-cgi?/etc/passwd the Script will read and return the local file. This is...
CVE-2005-3094
Avi Alkalay man-cgi script allows remote attackers to execute arbitrary code via shell metacharacters in the topic parameter...
CVE-2005-3094
CVE-2005-3094 concerns a vulnerable Avi Alkalay man-cgi script that allows remote attackers to execute arbitrary code through shell metacharacters in the topic parameter. The NVD entry rates this as HIGH (CVSS v2 base 7.5) with a network attack vector, low complexity, and no authentication requir...