PSA05-010.txt

Portcullis Security Advisory Vulnerable System: MediaPartner 5.0 Vulnerability Title: Directory Traversal Vulnerability and Cross Site Scripting Issue Vulnerability discovery and development: Portcullis Security Testing Service Affected systems: Emotion MediaPartner Web Server Version 5.0 5.1 not...

MySQL Eventum index.php email Parameter XSS

The MySQL Eventum install hosted on the remote web server is vulnerable to a cross-site scripting attack because it fails to sanitize user-supplied input to the 'email' parameter of the 'index.php' script before using it to generate dynamic HTML output. With a specially crafted URL, an attacker c...

SIR GNUBoard Remote File Inclusion

It is possible to make the remote web server read arbitrary files by using the GNUBoard CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...

PAFileDB Multiple Script Error Message Path Disclosure

There is a flaw in the remote version of paFileDB that may let an attacker obtain the physical path of the remote installation by sending a malformed request to one of the scripts 'admins.php', 'category.php', or 'team.php'. This information may help an attacker make more focused attacks against...

technote.pl

Technote Inc. from Korea Command Excution Spawn bash style Shell with webserver uid This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $pdf; my $url1; my $number; my $url2; my $shiz; my @results; my $probe; my @U; $U1 =...

HTTP Header Name Remote Format String

The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...

CVE-2004-1691

The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service CPU consumption and crash via a large amount of data...

Keene Digital Media Server Multiple Script XSS

The remote host runs Keene digital media server, a web server used to share digital information. This version is vulnerable to multiple cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Drinsane include'deprecatednasllevel.inc'; include'compat.inc';...

Xedus Webserver Connection Saturation DoS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to a denial of service. An attacker could stop the web server from accepting user requests by establishing multiple connections from the same host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Sympa New List Creation Description Field XSS

According to its version number, the installation of Sympa on the remote host contains an HTML injection vulnerability that may allow a user who has the privileges to create a new list to inject HTML tags in the list description field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. based on...

Gallery save_photos.php Arbitrary Command Execution

The version of Gallery hosted on the remote web server is affected by an arbitrary command execution vulnerability. This could allow an attacker to execute arbitrary commands on the remote host by uploading a file containing arbitrary PHP code. When the temp directory is web accessible, the...

Pete Stein GoScript 2.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/10853/info Pete Stein GoScript is prone to a remote command execution vulnerability. This may allow remote attackers to perform unauthorized actions on a victim computer in the context of the hosting Web server. http://www.example.com/go.cgi?|id|...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

U.S. Robotics USR808054 Wireless Access Point - Web Administration Denial of Service

source: https://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying service to legitimate users of the...

SUSE-SA:2003:005: susehelp

The remote host is missing the patch for the advisory SUSE-SA:2003:005 susehelp. During a code review of the susehelp package the SUSE Security Team recognized that the security checks done by the susehelp CGI scripts are insufficient. Remote attackers can insert certain characters in CGI queries...

NetChat HTTP Server Stack Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetChat HTTP Server Stack Overflow RELEASE DATE: May 16, 2004 DATE REPORTED: May 12, 2004 RISK: Medium IMPACT: Attackers may be able to execute arbitrary code with the privileges of the user running the applicaton. VERSIONS: = 7.3 OVERVIEW: NetChat is...

DiGi WWW Server 1 - Remote Denial of Service

DiGi WWW Server 1 - Remote Denial of Service source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will...

DiGi WWW Server 1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume large amounts of CPU resources. Sinc...

Web Server HTTP Basic Authorization Header Remote Overflow DoS

It was possible to kill the web server by sending a request with a long basic authentication field. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. Affected: Monit include"compat.inc"; if...

Aborior Encore WebForum display.cgi file Parameter Command Execution

The remote host is running the Aborior Web Forum. There is a flaw in this version that could allow an attacker to execute arbitrary commands on this server with the privileges of the affected web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...