CVE-2011-10017: Improper Neutralization of Special Elements used in an OS Command

Snort Report versions 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts. These scripts fail to properly sanitize user input passed via the target GET parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no...

PT-2025-33086 · Snort +1 · Snort +1

Name of the Vulnerable Software and Affected Versions: Snort versions prior to 1.3.2 Description: Snort Report versions prior to 1.3.2 contain a remote command execution issue in the nmap.php and nbtscan.php scripts. These scripts do not properly sanitize user input received through the target GE...

Snortreport nmap.php and nbtscan.php Remote Command Execution

No description provided by source. $Id: snortreportexec.rb 13843 2011-10-09 06:12:54Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

Snortreport - '/nmap.php' / 'nbtscan.php' Remote Command Execution (Metasploit)

$Id: snortreportexec.rb 13843 2011-10-09 06:12:54Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Snortreport nmap.php and nbtscan.php Remote Command Execution

Exploit for php platform in category web applications $Id: snortreportexec.rb 13843 2011-10-09 06:12:54Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Snortreport nmap.php/nbtscan.php Remote Command Execution

This module exploits an arbitrary command execution vulnerability in nmap.php and nbtscan.php scripts. Module Options msf use exploit/multi/http/snortreport/exec msf undefinedexec show actions ...actions... msf undefinedexec set ACTION msf undefinedexec show options ...show and set options... msf...

Snort Report < 1.3.2 nmap.php target Parameter Arbitrary Command Execution Vulnerability

Snort Report is prone to a vulnerability that lets attackers execute arbitrary code. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl CPE =...

SnortReport nmap.php target Parameter Arbitrary Command Execution

The remote web server hosts SnortReport, an add-on module for Snort. The version of this application installed on the remote host fails to sanitize input to the 'target' parameter of the 'nmap.php' script before using it in a call to the PHP 'exec' function. An unauthenticated, remote attacker ca...