Wordtrans-web远程任意Shell命令注入漏洞

BUGTRAQ ID: 30027 CNCAN ID：CNCAN-2008070202 wordtrans-web是一款基于Web的多语言字典查询工具。 wordtrans-web存在输入验证问题，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。...

Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

[SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability

Wordtrans-web Remote Command Execution Vulnerability Scanit R&D Labs Security Advisory http://www.scanit.net/rd/advisories/ Jun 30, 2008 Filename: SCANIT-2008-002.txt SCANIT ID: SCANIT-2008-002 Published: June 30th, 2008 I. Summary Wordtrans is a free front-end graphical application that allows y...

[SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability

Wordtrans-web Remote Command Execution Vulnerability Scanit R&D Labs Security Advisory http://www.scanit.net/rd/advisories/ Jun 30, 2008 Filename: SCANIT-2008-003.txt SCANIT ID: SCANIT-2008-003 Published: June 30th, 2008 I. Summary Wordtrans is a free front-end graphical application that allows y...

CVE-2002-0837

wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to 1 execute arbitrary code or 2 conduct cross-site scripting attacks via certain parameters possibly "dict" to the wordtrans.php script...

CVE-2002-0837

wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to 1 execute arbitrary code or 2 conduct cross-site scripting attacks via certain parameters possibly "dict" to the wordtrans.php script...

CVE-2002-0837

CVE-2002-0837 affects wordtrans 1.1pre8 and earlier in the wordtrans-web package. Root cause: improper input validation in wordtrans.php allows remote code execution or cross-site scripting via certain parameters (potentially including dict). Impact: remote arbitrary code execution and XSS. Remed...

Guardent Client Advisory: Multiple wordtrans-web Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Guardent Client Advisory Multiple wordtrans-web Vulnerabilities September 6th, 2002 Summary: Guardent has discovered vulnerabilities in the wordtrans-web package. The vulnerabilities allow for remote execution of arbitrary code under the privileges of user runni...