EUVD-2001-0462

Malware in sbrugna...

Microburst uStorekeeper 1.x Remote Arbitrary Commands Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit URLs containing...

CVE-2001-0466

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2001-0466

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2001-0466

CVE-2001-0466 is a directory traversal vulnerability in ustorekeeper 1.61 that allows remote attackers to read arbitrary files through a ".." in the file parameter. The issue stems from improper validation of the file parameter in the ustorekeeper CGI, enabling unauthorized disclosure (confidenti...

uStorekeeper ustorekeeper.pl file Parameter Traversal Arbitrary File Access

The 'ustorekeeper.pl' CGI script installed on the remote host allows an attacker to read arbitrary files subject to the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

Microburst uStorekeeper 1.x - Arbitrary Commands

Microburst uStorekeeper 1.x - Arbitrary Commands source: https://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit...

Microburst uStorekeeper 1.x - Arbitrary Commands

source: https://www.securityfocus.com/bid/2536/info A vulnerability exists in versions of uStorekeeper Online Shopping System from Microburst Technologies. The script fails to properly validate user-supplied input, allowing remote users to submit URLs containing '/../' sequences and arbitrary...