PALS Library System WebPALS 1.0 - pals-cgi Traversal Arbitrary File Read

PALS Library System WebPALS 1.0 - pals-cgi Traversal Arbitrary File Read source: https://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker...

PALS Library System WebPALS 1.0 - 'pals-cgi' Arbitrary Command Execution

source: https://www.securityfocus.com/bid/2372/info A specially crafted URL composed of a known filename, will disclose the requested file residing on a machine running WebPALS. This vulnerability will also allow an attacker to execute arbitrary code with root privileges...