8 matches found
EUVD-1999-0196
Malware in sbrugna...
WEBgais 1.0 websendmail Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the gais Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to execute arbitrary...
CGI vulnerability highlights-vulnerability warning-the black bar safety net
CGI vulnerability highlights For the following list of CGI vulnerabilities,simply speaking,you can directly delete the program or rewrite the program to reach the safety of the mesh The Below is not completely reprinted from the green Forumvia a Supplement A. phf vulnerability The phf vulnerabili...
Common 2 7 CGI vulnerability methods of attack-vulnerability warning-the black bar safety net
A. phf vulnerability The phf vulnerability seems to be the most classic,almost all of the articles will be introduced,you can execute Server commands,such as display the/etc/passwd: lynx http://www.victim.com/cgi-bin/phf?Q...t%20/etc/passwd But we can still find it? II. php. cgi 2. 0beta10 or...
CVE-1999-0196
WebGais Websendmail CGI (Webgais 1.0) is affected. The vulnerability enables a remote user to access arbitrary files and execute arbitrary code via the receiver parameter in the CGI (VAR_receiver), allowing command execution with the web server daemon’s privileges. Red Hat and CVE records corrobo...
WebGais websendmail CGI Arbitrary Command Execution
The 'websendmail' program, part of Webgais, appears to be installed on the remote host. This CGI script has a well-known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, In...
WEBgais 1.0 - websendmail Remote Command Execution
WEBgais 1.0 - websendmail Remote Command Execution source: https://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the "gais" Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to...
WEBgais 1.0 - websendmail Remote Command Execution
source: https://www.securityfocus.com/bid/2077/info WEBgais is a package that provides a web interface to the "gais" Global Area Intelligent Search search engine tool. This package contains a vulnerable script, websendmail, which can be used to execute arbitrary commands on the server with the...