69 matches found
CVE-2008-0551
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...
CVE-2008-0551: Improper Control of Generation of Code
The NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1 and earlier in Namo Web Editor in Sejoong Namo ActiveSquare 6 allows remote attackers to execute arbitrary code via a URL in the argument to the Install method. NOTE: some of these details are obtained from third party...
Namo Web Editor NamoInstaller.dll ActiveX控件任意命令执行漏洞
BUGTRAQ ID: 27453 Namo Web Editor是一个软件包,允许Web应用人员为网站用户提供创建文档、上传文件等支持。 Namo Web Editor的ActiveX控件实现上存在漏洞,远程攻击者可能利用此漏洞在用户系统上执行任意命令。 Namo Web Editor软件包中所安装的NamoInstaller.NamoInstall.1 ActiveX控件(NamoInstaller.dll)没有正确地验证对Install方式的输入参数,如果用户受骗访问了恶意网页并向该方式传送了恶意参数的话,就可能导致下载并执行恶意程序。 SJ NAMO Web Editor...
[UNIX] Community Link Pro Command Execution (login.cgi)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2005-2111
login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter...
CVE-2005-2111
The OpenVAS/Nessus entries confirm CVE-2005-2111 affects Community Link Pro Web Editor’s login.cgi. The flaw lies in the login.cgi script where the file parameter is not sanitized, enabling an unauthenticated attacker to execute arbitrary commands on the remote host. This is described as remote c...
prowebExec.txt
BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...
CVE-2005-2111: Undefined Security Weakness
login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter...
[badroot security] Community link pro web editor: Remote command Execution
BADROOT SECURITY GROUP Security Advisory 2005-0x05 http://www.badroot.org irc.us.azzurra.org badroot - - - - - - - - - - - - - - - - - - - - - - - - - Authors ....... spher3 spher3 at fatalimpulse dot net mozako admin at fatalimpulse dot net Date...