85 matches found
PT-2009-3394 · Apache +2 · Apache Tomcat +2
Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 4.1.0 through 4.1.39 Apache Tomcat versions 5.5.0 through 5.5.27 Apache Tomcat versions 6.0.0 through 6.0.18 Description: The issue allows local users to read or modify the web.xml, context.xml, or tld files of arbitrar...
C.J. Steele Tattle - Remote Command Execution
C.J. Steele Tattle - Remote Command Execution source: https://www.securityfocus.com/bid/13883/info tattle is affected by a remote command execution vulnerability. An attacker can supply arbitrary commands prefixed with the '|' character as a value for the 'tld' variable that will be executed in t...
C.J. Steele Tattle - Remote Command Execution
source: https://www.securityfocus.com/bid/13883/info tattle is affected by a remote command execution vulnerability. An attacker can supply arbitrary commands prefixed with the '|' character as a value for the 'tld' variable that will be executed in the context of the application. An attacker can...
CVE-2000-0010
The CVE-2000-0010 entry concerns WebWho+ whois.cgi, a CGI script where the TLD parameter can be manipulated to execute arbitrary shell commands on the remote host. Multiple sources (NVD/NASM-like entries and PT-PTSecurity) confirm remote command execution as the impact, due to shell metacharacter...
