CVE-2005-1707

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

CVE-2005-1707

CVE-2005-1707 affects Gentoo webapp-config, where the fn_show_postinst function can be abused via a symlink attack on the temporary file postinst.txt. This race condition could let a local attacker overwrite arbitrary files with the privileges of the webapp-config user, potentially disrupting ope...

CVE-2005-1707

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

CVE-2005-1707: Undefined Security Weakness

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

[UNIX] WebApp Arbitrary Code Execution (apage.cgi, Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

webapp-config-05182005.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gentoo webapp-config insecure temporary file creation Vendor: http://www.gentoo.org Advisory: http://www.zataz.net/adviso/webapp-config-05182005.txt Vendor informed: yes Exploit available: yes Impact : high Exploitation : low Gentoo webapp-config...

WebAPP 0.9.9.2.1 - Remote Command Execution (2)

WebAPP 0.9.9.2.1 - Remote Command Execution 2 ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

WebAPP 0.9.9.2.1 - Remote Command Execution 1 !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (1st)

Exploit for cgi platform in category web applications ======================================================== WebAPP v0.9.9.2.1 Remote Command Execution Exploit 1st ======================================================== !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (2nd updated)

No description provided by source. ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (2nd updated)

Exploit for cgi platform in category web applications ================================================================ WebAPP v0.9.9.2.1 Remote Command Execution Exploit 2nd updated ================================================================ ?php WebAPP v0.9.9.2.1 Remote Command Execution...

WebAPP 0.9.9.2.1 - Remote Command Execution (1)

!/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in 4444 Port with Nobody Access !!! All...

WebAPP 0.9.9.2.1 - Remote Command Execution (2)

?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi "command" Linux dprhensim19.doteasy.com...

WebAPP v0.9.9.2.1 Remote Command Execution Exploit (1st)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...

CVE-2005-1628

WebAPP apage.cgi remote command execution (CVE-2005-1628) affects WebAPP versions 0.9.9.2.1 and earlier. The flaw is due to lack of input validation in the f parameter, allowing an attacker to execute arbitrary shell commands on the remote host with the web server’s privileges. Affected component...

CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

CVE-2005-1628

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

web-app.org WebAPP Encoded Request .dat File Disclosure

According to its banner, the remote host is running a version of WebAPP that suffers from an unspecified file disclosure vulnerability. An attacker may be able to use this flaw to disclose the contents of 'dat' files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2005-1628: Improper Input Validation

apage.cgi in WebAPP 0.9.9.2.1, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...

PT-2005-2605 · Webapp · Webapp

Name of the Vulnerable Software and Affected Versions: WebAPP versions 0.9.9.2.1 and earlier Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter of the apage.cgi page. Recommendations: For WebAPP versions 0.9.9.2.1 and earlier,...