4116 matches found
FileSeek CGI Script - Remote Command Execution
FileSeek CGI Script - Remote Command Execution source: https://www.securityfocus.com/bid/6783/info FileSeek is an example cgi-script from "The CGI/Perl Cookbook from John Wiley & Sons". The script is written and maintained by Craig Patchett. It is mainly used to find and download files on a web...
CVE-2002-0061
Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters a | pipe character provided as arguments to batch .bat or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe...
PT-2002-1151 · Microsoft +1 · Cmd.Exe +2
Name of the Vulnerable Software and Affected Versions: Apache for Win32 versions 1.3.24 and earlier Apache for Win32 versions 2.0.x through 2.0.34-beta Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters, such as a | pipe character, provided as...
CVE-2001-1206
Matrix CGI vault Last Lines 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the $errorlog variable...
CVE-2001-1179
xman allows local users to gain privileges by modifying the MANPATH to point to a man page whose filename contains shell metacharacters...
CVE-2001-1214
CVE-2001-1214 : The Unix Manual PHP script (manual.php) from Marcus S. Xenakis Unix Manual 1.0 allows remote code execution by supplying a URL with shell metacharacters. The CERT/CC entry confirms that manual.php does not adequately validate input before passing it to the shell, enabling remote c...
CVE-2001-1206
CVE-2001-1206 affects Matrix CGI vault Last Lines 2.0. The vulnerability: remote attackers can execute arbitrary commands via shell metacharacters in the $error_log variable, enabling remote code execution over the network. The provided sources do not specify affected versions beyond Last Lines 2...
CVE-2001-0461
CVE-2001-0461 affects the Free On-Line Dictionary of Computing (FOLDOC) template.cgi. Remote attackers can read files and execute commands by injecting shell metacharacters in the template.cgi argument. This is documented in NVD/CVE records; no remediation/patch details are provided in the connec...
CVE-1999-1512
The CVE-1999-1512 entry concerns the AMaViS virus scanner, specifically versions 0.2.0-pre4 and earlier. The documented vulnerability allows remote attackers to execute arbitrary commands as root by sending an infected mail message containing shell metacharacters in the reply-to field. The availa...
CVE-2001-0980
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page...
CVE-1999-1512
The AMaViS virus scanner 0.2.0-pre4 and earlier allows remote attackers to execute arbitrary commands as root via an infected mail message with shell metacharacters in the reply-to field...
CVE-2001-0992
shopplus.cgi in ShopPlus shopping cart allows remote attackers to execute arbitrary commands via shell metacharacters in the "file" parameter...
CVE-2001-0930
Technical details about CVE-2001-0930 are not publicly provided in the connected documents. Monitor for updates to confirm affected products, impact and remediation when additional details become available.
CVE-2001-0956
speechd 0.54 and earlier, with the Festival or rsynth speech synthesis package, allows attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-1014
CVE-2001-1014 concerns the E-Shop (WebDiscount) CGI used by eshop.pl. The OpenVAS NASL entry documents a vulnerability in the WebDiscount CGI that allows remote attackers to execute arbitrary commands with the web server’s privileges by supplying shell metacharacters in the seite parameter. This ...
CVE-2001-0937
CVE-2001-0937 concerns PGPMail.pl CGI (up to version 1.31) where the recipient and pgpuserid CGI variables are not properly filtered before being passed to shell commands. This allows remote attackers to execute arbitrary commands on the server with the web server’s privileges. OpenVAS and Nessus...
CVE-2001-0930
Sendpage.pl allows remote attackers to execute arbitrary commands via a message containing shell metacharacters...
CVE-2001-1214
manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remote attackers to execute arbitrary code via a URL that contains shell metacharacters...