CVE-2019-15107

CVE-2019-15107 此仓库包含一个用 bash 编写的小型脚本，用于在不使用 metasploit 的情况下利用 CVE-2019-15107。 使用方法非常简单，只需下载并执行，无需任何依赖。 root@kitploit: root@kali: ./webmin-CVE-2019-15107.sh 10.10.73.185 'uname -a' Error - Perl execution failed Your password has expired, and a new one must be chosen.Linux source 4.15.0-108-generic...

CVE-2002-0307

Directory traversal vulnerability in ans.pl in Avenger's News System ANS 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. dot dot in the p parameter, which reads the target file and attempts to execute the li...

SQL, PERL, HTML injection in IBM Informix Web DataBlade

There are multiple ways for SQL query modification and to execute user-supplied perl file...

Дырка в DCForum (file uploading, perl execution)

Можно загрузить и выполнить perl-приложение...

qDefense Advisory: DCForum allows remote read/write/execute

qDefense Advisory Number QDAV-5-2000-1 Product: DCForum Vendor: DCScripts www.dcscripts.com Version Tested: DCForum 2000 1.0 Severity: Any remote attacker may gain read/write/execute privilleges Cause: Failure to validate input; Trust of hidden fields; Allows uploading of arbitrary files by defau...

CVSWeb Developer CVSWeb 1.80 - Insecure Perl 'open' Code Execution

source: https://www.securityfocus.com/bid/1469/info Cvsweb 1.80 makes an insecure call to the perl OPEN function, providing attackers with write access to a cvs repository the ability to execute arbitrary commands on the host machine. The code that is being exploited here is the following: open$f...