5658 matches found
CVE-2007-6459
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2007-6459
The CVE-2007-6459 entry affects Anon Proxy Server 0.100 (and likely 0.101). The vulnerability allows remote command execution via shell metacharacters in the host parameter to diagdns.php and in the host (and possibly the port) parameter to diagconnect.php. This is explicitly described as a separ...
CVE-2007-6459: Improper Control of Generation of Code
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2003-1538: Improper Input Validation
susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries...
CVE-2007-6459
Anon Proxy Server 0.100, and probably 0.101, allows remote attackers to execute arbitrary commands via shell metacharacters in 1 the host parameter to diagdns.php, and 2 the host parameter and possibly 3 the port parameter to diagconnect.php, a different vulnerability than CVE-2007-6460...
CVE-2007-6176
kbwhois.cgi in K+B-Bestellsystem aka KB-Bestellsystem allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 domain or 2 tld parameter in a checkowner action...
CVE-2007-6182
The responder program in ISPsystem ISPmanager aka ISPmgr 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments...
CVE-2007-6182: Undefined Security Weakness
The responder program in ISPsystem ISPmanager aka ISPmgr 4.2.15.1 allows local users to gain privileges via shell metacharacters in command line arguments...
CVE-2007-6176: Improper Input Validation
kbwhois.cgi in K+B-Bestellsystem aka KB-Bestellsystem allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 domain or 2 tld parameter in a checkowner action...
kbbestell-exec.txt
"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
KB-Bestellsystem (kb_whois.cgi) Command Execution Vulnerability
No description provided by source. "KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
KB-Bestellsystem - kb_whois.cgi Command Execution
KB-Bestellsystem - kbwhois.cgi Command Execution "KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
KB-Bestellsystem - 'kb_whois.cgi' Command Execution
"KB-Bestellsystem" is a domain order system written in Perl. The "domain" and "tld" parameters in "kbwhois.cgi" are not filtering shell metacharacters. The following examples will show you the /etc/passwd file:...
KB-Bestellsystem (kb_whois.cgi) Command Execution Vulnerability
Exploit for cgi platform in category web applications =============================================================== KB-Bestellsystem kbwhois.cgi Command Execution Vulnerability =============================================================== "KB-Bestellsystem" is a domain order system written in...
Code injection
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...
CVE-2007-5926
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...
CVE-2007-5926
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...
CVE-2007-5926: Improper Input Validation
OpenBase 10.0.5 and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in arguments to the 1 AsciiBackup, 2 OEMLicenseInstall, and possibly other stored procedures...
Design/Logic Flaw
GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacharacters in a link element in a feed...
