CVE-2012-1795: Improper Neutralization of Special Elements used in an OS Command

webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012...

WebGlimpse 2.14.1/2.18.8 - 'webglimpse.cgi' Remote Command Injection

source: https://www.securityfocus.com/bid/52627/info WebGlimpse is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the application. WebGlimpse versions prior to 20.20.0 are affected...

CVE-2009-5114

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5112

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

Directory traversal

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5112

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5114

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

CVE-2009-5114

WebGlimpse 2.18.7 and earlier is affected by a directory traversal vulnerability in wgarcmin.cgi that allows remote attackers to read arbitrary files via a .. in the DOC parameter. Affected component is WebGlimpse, version 2.18.7 and prior; root cause CWE-22 (path traversal). Impact per sources: ...

CVE-2012-1787

CVE-2012-1787 describes multiple cross-site scripting (XSS) vulnerabilities in Webglimpse’s wgarcmin.cgi script for version 2.20.0 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML by supplying crafted values in the (1) URL, (2) FILE, or (3) DOMAIN parameters, e...

CVE-2009-5112

CVE-2009-5112 affects WebGlimpse (version 2.18.7 and earlier). The issue allows remote attackers to disclose the installation path via a crafted request to wgarcmin.cgi. The description provided does not include exploit specifics beyond this disclosure vector. No patched version or remediation de...

CVE-2009-5113

The CVE-2009-5113 entry describes a cross-site scripting (XSS) vulnerability in WebGlimpse, specifically in the wgarcmin.cgi component of WebGlimpse 2.18.7 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter. The available sources (NVD/NVD m...

CVE-2009-5113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

Brute Force и XSS уязвимости в Webglimpse

Здравствуйте 3APA3A! После предыдущих многочисленных Cross-Site Scripting, Full path disclosure, Directory Traversal и Authorization bypass уязвимостей в Webglimpse SecurityVulns ID: 9436, 9443, 9778, 9876, сообщаю вам о найденных мною новых уязвимостях в Webglimpse. Это Brute Force и Cross-Site...

CVE-2009-5112: Exposure of Sensitive Information to an Unauthorized Actor

wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request...

CVE-2009-5114: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

PT-2012-3538

Name of the Vulnerable Software and Affected Versions Webglimpse versions 2.20.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the URL, FILE, or DOMAIN parameters in the wgarcmin.cgi component. Recommendations For Webglimpse versions 2.20.0 a...

PT-2012-1279

Name of the Vulnerable Software and Affected Versions WebGlimpse versions 2.18.7 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. dot dot in the DOC parameter of the wgarcmin.cgi endpoint. Recommendations For WebGlimpse...