Solaris 10 (sparc) : 141552-04

SunOS 5.10: Apache 2 modperl Perl cgi pat. Date this patch was last updated by Sun : Apr/20/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

MGASA-2017-0146 Updated perl-CGI-Emulate-PSGI packages fix security vulnerability

This update removes the setting of the HTTPPROXY environment value. This works around the httproxy vulnerability aka CVE-2016-5387...

[SECURITY] Fedora 23 Update: perl-CGI-Emulate-PSGI-0.22-1.fc23

This module allows an application designed for the CGI environment to run in a PSGI environment, and thus on any of the back-ends that PSGI supports...

Fedora 23 : perl-CGI-Emulate-PSGI (2016-a29c65b00f) (httpoxy)

This updates bumps perl-CGI-Emulate-PSGI to version 0.22 which removes the setting of the HTTPPROXY environment value. This works around the httproxy vulnerability aka CVE-2016-5387 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

Fedora Update for perl-CGI-Emulate-PSGI FEDORA-2016-683d0b257b

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : perl-CGI-Emulate-PSGI (2016-683d0b257b) (httpoxy)

This updates bumps perl-CGI-Emulate-PSGI to version 0.22 which removes the setting of the HTTPPROXY environment value. This works around the httproxy vulnerability aka CVE-2016-5387 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update...

CVE-2015-0871

Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0871

CVE-2015-0871 is a cross-site scripting vulnerability in the Perl CGI-based shiromuku(u1)GUESTBOOK bulletin board, affected in version 1.62 and earlier. The underlying issue allows an attacker to inject arbitrary script/HTML, potentially leading to arbitrary script execution in a user’s browser. ...

CVE-2015-0871

Cross-site scripting XSS vulnerability in Mrs. Shiromuku Perl CGI shiromukuu1GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#17480391: shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting

shiromukuu1GUESTBOOK from Perl CGI's By Mrs. Shiromuku is a bulletin board software. shiromukuu1GUESTBOOK contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the...

CVE-2015-0868

Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...

Unrestricted file upload

Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...

CVE-2015-0868

Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromukubu2BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file...

CVE-2015-0868

CVE-2015-0868 is an unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS, affecting versions up to and including 2.90 (2.91 fixes referenced by sources). The flaw allows a remote attacker to upload an executable file and potentially execute arbitrary code on the ser...

JVN#94502417: shiromuku(bu2)BBS vulnerable to arbitrary file creation

shiromukubu2BBS from Perl CGI's By Mrs. Shiromuku is a bulletin board software. shiromukubu2BBS contains a vulnerability that may allow a remote attacker to create arbitrary files. Impact A remote attacker creating arbitrary files may result in arbitrary code execution on the server. Solution...

Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit

No description provided by source. ?php / Advisory: http://www.kliconsulting.com/users/mbrooks/UPBadvisory.rtf Vendors site: http://forum.myupb.com/ Download: http://fileserv.myupb.com/download.php?url=upb196GOLD.zip http://prdownloads.sourceforge.net/textmb/upb1.8.2.zip?download Download Mirror:...

nph-maillist 3.0/3.5 Arbitrary Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2563/info nph-maillist is a Perl CGI script that handles mailing lists, typically used to notify interested users of site updates. A hostile user can enter commands embedded in an email address via the subscription form,...

eXtropia bbs_forum.cgi 1.0 - Remote Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2177/info bbsforum.cgi is a popular Perl cgi script from eXtropia.com. It supports the creation and maintenance of web-based threaded discussion forums. Version 1.0 of bbsforum.cgi fails to properly validate user-supplied...

CNC Technology BizDB 1.0 bizdb-search.cgi Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1104/info BizDB is a web databse integration product using perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at th...

CGI-World Poll It 2.0 Internal Variable Override Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1431/info Poll It is a Perl CGI application used to create and maintain opinion polls on websites. The program relies on a number of internal variables. These variables can be overwritten by any remote user by specifying...