77 matches found
CVE-2001-1495
networkquery.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter...
CVE-2004-1964
The CVE-2004-1964 entry describes a Cross-site Scripting (XSS) vulnerability in Network Query Tool (NQT) 1.6, specifically in nqt.php where the portNum parameter can be abused to inject arbitrary web script or HTML. Affected component: Network Query Tool (NQT) 1.6; vulnerability type: XSS; root c...
CVE-2004-1963
nqt.php in Network Query Tool NQT 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message...
CVE-2004-1963
CVE-2004-1963 discusses a vulnerability in Network Query Tool (NQT) 1.6 where the nqt.php handling of the portNum parameter leads to an error message that reveals the full filesystem path, potentially exposing sensitive information to remote attackers. The affected software is NQT; the vulnerable...
Network Query Tool Detection
Binary data 2743.prm...
[waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6]
================================================================================ waraxe-2004-SA024 ================================================================================ XSS and full path disclosure in Network Query Tool 1.6...
CVE-2004-1964
Cross-site scripting XSS vulnerability in nqt.php in Network Query Tool NQT 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter...
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by 1 cvslog.cgi, 2 cvsview2.cgi, or 3 multidiff.cgi...
CVE-2003-0154
Cross-site scripting vulnerabilities XSS in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via 1 the file, root, or rev parameters to cvslog.cgi, 2 the file or root parameters to cvsblame.cgi, 3 various parameters to cvsquery.cgi, 4 the person parameter to...
CVE-2003-0153
CVE-2003-0153 affects the bonsai Mozilla CVS query tool. The vulnerability is an absolute path disclosure exposed in error messages generated by cvslog.cgi, cvsview2.cgi, and multidiff.cgi. Connected records confirm Debian advisory DSA-265-1 documents the issue and notes a missing update; OpenVAS...
CVE-2003-0154
CVE-2003-0154 affects the Bonsai Mozilla CVS query tool (CGI suite) used to browse CVS repositories. The vulnerability is a cross-site scripting (XSS) flaw that can be triggered via multiple parameters: cvslog.cgi (file, root, rev), cvsblame.cgi (file, root), cvsquery.cgi (various), showcheckins....
CVE-2003-0153
bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by 1 cvslog.cgi, 2 cvsview2.cgi, or 3 multidiff.cgi...
CVE-2003-0155
CVE-2003-0155 affects bonsai, the Mozilla CVS query tool. It allows remote attackers to access the parameters page without authentication, exposing configuration parameters. CVSS v2 base score is 5.0 (medium) with Network attack vector, low attack complexity, no authentication required, and parti...
CVE-2003-0152
CVE-2003-0152 concerns the Bonsai Mozilla CVS query tool CGI, allowing remote execution of arbitrary commands as www-data. Public records (Debian DSA-265) show fixes in Bonsai updates (e.g., bonsai 1.3+cvs20020224-1woody1 for woody; later fixes for sid). OpenVAS/Nessus entries corroborate multipl...
CVE-2001-1495
networkquery.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter...
[Advisory iSecureLabs] Network Query Tool remote command execution
-- Network Query Tool 1.0 and Network Query Tool 1.0 Adapted for PHPNuke 5.2 remote command execution -- Problem discovered: 22/10/2001 by Cabezon Aurйlien | [email protected] | http://www.isecurelabs.com/article.php?sid=147 -- Description -- Network Query Tool 1.0 Adapted for...