CVE-2019-15107

CVE-2019-15107 This repo contains a small script in bash to exploit CVE-2019-15107 without using metasploit. Use is pretty straightforward, just download and execute, no dependencies root@kali: ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a' Error - Perl execution failed Your password has...

PT-2026-134511

Name of the Vulnerable Software and Affected Versions WebDyne versions 3.007 through 3.021 Description Path traversal in the PSGI API route fallback allows the execution of Perl code within .psp files located outside the document root. This occurs because the PSGI handler retries requests that...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: perl-DBI (UTSA-2026-147019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147019 advisory. DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI...

CVE-2002-0307

Directory traversal vulnerability in ans.pl in Avenger's News System ANS 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. dot dot in the p parameter, which reads the target file and attempts to execute the li...

SQL, PERL, HTML injection in IBM Informix Web DataBlade

There are multiple ways for SQL query modification and to execute user-supplied perl file...

Дырка в DCForum (file uploading, perl execution)

Можно загрузить и выполнить perl-приложение...

qDefense Advisory: DCForum allows remote read/write/execute

qDefense Advisory Number QDAV-5-2000-1 Product: DCForum Vendor: DCScripts www.dcscripts.com Version Tested: DCForum 2000 1.0 Severity: Any remote attacker may gain read/write/execute privilleges Cause: Failure to validate input; Trust of hidden fields; Allows uploading of arbitrary files by defau...

CVSWeb Developer CVSWeb 1.80 - Insecure Perl 'open' Code Execution

source: https://www.securityfocus.com/bid/1469/info Cvsweb 1.80 makes an insecure call to the perl OPEN function, providing attackers with write access to a cvs repository the ability to execute arbitrary commands on the host machine. The code that is being exploited here is the following: open$f...