[SA17741] blogBuddies Cross-Site Scripting Vulnerabilities

TITLE: blogBuddies Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA17741 VERIFY ADVISORY: http://secunia.com/advisories/17741/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: blogBuddies 0.x http://secunia.com/product/6225/ DESCRIPTION: GB has...

CNC Technology BizDB 1.0 - 'bizdb-search.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the webserver...