[waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6]

================================================================================ waraxe-2004-SA024 ================================================================================ XSS and full path disclosure in Network Query Tool 1.6...

CVE-2004-1964

Cross-site scripting XSS vulnerability in nqt.php in Network Query Tool NQT 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter...

CVE-2001-1495

networkquery.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter...

Шел-команды в Network Query Tool (code execution)

Нефильтруемые шел-символы при вызове внешней программы...

[Advisory iSecureLabs] Network Query Tool remote command execution

-- Network Query Tool 1.0 and Network Query Tool 1.0 Adapted for PHPNuke 5.2 remote command execution -- Problem discovered: 22/10/2001 by Cabezon Aurйlien | [email protected] | http://www.isecurelabs.com/article.php?sid=147 -- Description -- Network Query Tool 1.0 Adapted for...