35 matches found
EUVD-2005-2611
Malware in sbrugna...
EUVD-2005-2610
Malware in sbrugna...
EUVD-2006-1758
Malware in sbrugna...
EUVD-2006-1757
Malware in sbrugna...
VegaDNS axfr_get.php Command Injection
A command injection vulnerability exists in the axfrget.php script of VegaDNS. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the target server. Successful exploitation could allow the attacker to execute arbitrary commands...
VegaDNS Remote Command Injection Vulnerability
VegaDNS is a tinydns management tool written in PHP to facilitate DNS administration via web browser logging. VegaDNS suffers from a remote command injection vulnerability. As the file axfrget/php allows unauthenticated access, fails to properly apply input to all variables that are being used...
VegaDNS Detection
Detection of VegaDNS The script sends a connection request to the server and attempts to detect the presence of VegaDNS and to extract its version. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...
VegaDNS RCE Vulnerability
VegaDNS is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vegadns:vegadns...
VegaDNS 0.13.2 - Remote Command Injection Exploit
Exploit for php platform in category web applications !/usr/bin/perl VegaDNS is a tinydns administration tool written in PHP to allow easy administration of DNS records through a web browser. -- http://www.vegadns.org The file axfrget.php allows unauthenticated access and fails to correctly apply...
VegaDNS 0.13.2 - Remote Command Injection
!/usr/bin/perl $izd= qq โโโโโโโโโโโโโโ โโโโโโโ โโโ โโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโ โโโ โโโโโโโโโ โโโโโโโโโโโ โโโ โโโโโโโโโโโโโโ โโโโโโโโโโโ โโโ โโโโโ โโโ โโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโโโโโโโโโโ โโโโโโโโโโ...
VegaDNS 0.13.2 - Remote Command Injection
VegaDNS 0.13.2 - Remote Command Injection !/usr/bin/perl $izd= qq โโโโโโโโโโโโโโ โโโโโโโ โโโ โโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโ โโโโโโโโโโโโโโ โโโโโโโโ โโโโโโโโโโโ โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ โโโ โโโโโ โโโ โโโโโโโโโ โโโโโโโโโโโ โโโ โโโโโโโโโโโโโโ โโโโโโโโโโโ โโโ โโโโโ โโโ...
VegaDNS 0.13.2 Remote Command Injection
!/usr/bin/perl $izd= qq aaaaaaaaaaaaaa aaaaaaa aaa aaaaaa aaaaaaa aaaaaaa aaaaaaa aaaaaaa aaaaaaaaaaaaaa aaaaaaaa aaaaaaaaaaa aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa aaa aaaaa aaa aaaaaaaaa aaaaaaaaaaa aaa aaaaaaaaaaaaaa aaaaaaaaaaa aaa aaaaa aaa aaaaaaaaaaaaaaaaaaaaa aaa aaaaaaaaaaaaaa aaaaaaaaaa...
VegaDNS 0.8.1/0.9.8/0.9.9 Index.PHP Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14538/info VegaDNS is vulnerable to cross-site scripting attacks. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script co...
VegaDNS 0.9.9 index.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17433/info VegaDNS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitiz...
Sql injection
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2006-1757
Cross-site scripting XSS vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2006-1758
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter...
CVE-2006-1758
CVE-2006-1758 concerns a SQL injection in Vegadns 0.99. The vulnerability is in index.php and allows remote attackers to execute arbitrary SQL commands via the cid parameter. The CVSS v2 base score is 7.5 (HIGH), with network attack vector and no authentication required, causing partial confident...
CVE-2006-1757
Cross-site scripting XSS vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter...