CVE-2005-1707

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

CVE-2005-1707

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

CVE-2005-1707

CVE-2005-1707 affects Gentoo webapp-config, where the fn_show_postinst function can be abused via a symlink attack on the temporary file postinst.txt. This race condition could let a local attacker overwrite arbitrary files with the privileges of the webapp-config user, potentially disrupting ope...

[UNIX] WebApp Arbitrary Code Execution (apage.cgi, Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

webapp-config-05182005.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gentoo webapp-config insecure temporary file creation Vendor: http://www.gentoo.org Advisory: http://www.zataz.net/adviso/webapp-config-05182005.txt Vendor informed: yes Exploit available: yes Impact : high Exploitation : low Gentoo webapp-config...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (1st)

Exploit for cgi platform in category web applications ======================================================== WebAPP v0.9.9.2.1 Remote Command Execution Exploit 1st ======================================================== !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (2nd updated)

Exploit for cgi platform in category web applications ================================================================ WebAPP v0.9.9.2.1 Remote Command Execution Exploit 2nd updated ================================================================ ?php WebAPP v0.9.9.2.1 Remote Command Execution...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

!/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in 4444 Port with Nobody Access !!! All...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

WebAPP 0.9.9.2.1 - Remote Command Execution 1 !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a...

WebAPP 0.9.9.2.1 - Remote Command Execution (2)

WebAPP 0.9.9.2.1 - Remote Command Execution 2 ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (1st)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (2nd updated)

No description provided by source. ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi...

WebAPP 0.9.9.2.1 - Remote Command Execution (2)

?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi "command" Linux dprhensim19.doteasy.com...

CVE-2005-1628

WebAPP apage.cgi remote command execution (CVE-2005-1628) affects WebAPP versions 0.9.9.2.1 and earlier. The flaw is due to lack of input validation in the f parameter, allowing an attacker to execute arbitrary shell commands on the remote host with the web server’s privileges. Affected component...

CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

web-app.org WebAPP Encoded Request .dat File Disclosure

According to its banner, the remote host is running a version of WebAPP that suffers from an unspecified file disclosure vulnerability. An attacker may be able to use this flaw to disclose the contents of 'dat' files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

WebAPP apage.cgi f Parameter Arbitrary Command Execution

Due to a lack of user input validation, an attacker can exploit the 'apage.cgi' script in the version of WebAPP on the remote host to execute arbitrary commands on the remote host with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PT-2005-2605 · Webapp · Webapp

Name of the Vulnerable Software and Affected Versions: WebAPP versions 0.9.9.2.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter of the apage.cgi page. Recommendations: For WebAPP versions 0.9.9.2.1 and earlier,...

WebAPP Detection

This script detects whether the remote host is running WebAPP and extracts version numbers and locations of any instances found. WebAPP is an open source, web portal system written in Perl. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc";...