Command injection

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2008-6557

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2008-6556

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6556

CVE-2008-6556 affects The Puppet Master WebUtil 2.3 via cgi-bin/webutil.pl . The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the whois parameter. The root cause is improper handling of user-supplied input in the whois command, enabling ...

CVE-2008-6557

CVE-2008-6557 describes a remote command execution vulnerability in The Puppet Master WebUtil 2.7, caused by shell metacharacters in the details command processed by cgi-bin/webutil.pl. Affected component: WebUtil 2.7; root cause: unsafe handling of shell metacharacters allowing arbitrary command...

CVE-2008-6555

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command...

CVE-2008-6555

CVE-2008-6555 affects the WebUtil component in The Puppet Master, specifically the cgi-bin/webutil.pl script. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command, enabling full compromise of affected systems reachable over the networ...

CVE-2008-6555: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command...

CVE-2008-6556: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command...

CVE-2008-6557: Improper Input Validation

cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

CVE-2009-0923: Undefined Security Weakness

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

Shoutcast server buffer overflow

Buffer overflow in DNAS Relay service on master server reply parsing...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

Design/Logic Flaw

The SAN Manager Master Agent service aka msragent.exe in EMC Control Center before 6.1 does not properly authenticate SSTSENDFILE requests, which allows remote attackers to read arbitrary files...

CVE-2008-5420

CVE-2008-5420 concerns EMC Control Center prior to 6.1, where the SAN Manager Master Agent (msragent.exe) fails to authenticate SST_SENDFILE requests. This allows remote attackers to read arbitrary files by exploiting a flaw in the SST_SENDFILE handling (service listens on TCP port 10444). The vu...

CVE-2008-5419

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

CVE-2008-5419: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in SAN Manager Master Agent service aka msragent.exe in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SSTCTGTRANS requests...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/blog.php?user= REAL USER NAME HERE...

Vlog System 1.1 - SQL Injection

Vlog System 1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...