4 matches found
PT-2020-2772
Name of the Vulnerable Software and Affected Versions D-Link DIR-825 version 2.10 TRENDnet TEW-632BRP version 1.010B32 Description An issue exists in the dns query.cgi component of the affected devices, allowing remote attackers to execute arbitrary commands. This is possible via the dns query na...
PT-2017-9710
Name of the Vulnerable Software and Affected Versions Trend Micro Threat Discovery Appliance versions 2.6.1062r1 and earlier Description The issue allows remote authenticated users to execute arbitrary code as the root user. This is achieved by using shell metacharacters in the cache id parameter...
CVE-2006-4344: Undefined Security Weakness
CRLF injection vulnerability in CGI-Rescue Mail F/W System formd before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in 1 mail.cgi and 2 query.cgi...
CVE-2000-0039: Undefined Security Weakness
AltaVista search engine allows remote attackers to read files above the document root via a .. dot dot in the query.cgi CGI program...