cgi

cgi 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。

WebGlimpse 2.14.1/2.18.8 – ‘webglimpse.cgi’ Remote Command Injection

source: https://www.securityfocus.com/bid/52627/info

2012-03-20 Kevin Perry webapps

WebGlimpse 2.x – ‘wgarcmin.cgi’ Full Path Disclosure

source: https://www.securityfocus.com/bid/52646/info

2012-03-18 Websecurity webapps

Zend Server 5.6.0 – Multiple Remote Script Insertion Vulnerabilities

Zend Server 5.6.0 Multiple Remote Script Insertion Vulnerabilities

2012-03-12 LiquidWorm webapps

EditWrxLite CMS – ‘wrx.cgi’ Remote Command Execution

source: https://www.securityfocus.com/bid/51995/info

2012-02-13 chippy1337 webapps

Websense 7.6 Products – ‘favorites.exe’ Authentication Bypass

source: https://www.securityfocus.com/bid/51087/info

2011-12-15 Ben Williams webapps

Websense 7.6 Triton – ‘ws_irpt.exe’ Remote Command Execution

source: https://www.securityfocus.com/bid/51086/info

2011-12-15 Ben Williams webapps

Websense 7.6 – Triton Report Management Interface Cross-Site Scripting

source: https://www.securityfocus.com/bid/51085/info

2011-12-15 Ben Williams webapps

LibLime Koha 4.2 – Local File Inclusion

# Exploit Title: [Koha Opac Local File Inclusion]

2011-11-24 Akin Tosunlar webapps

HP Power Manager – ‘formExportDataLogs’ Remote Buffer Overflow (Metasploit)

##

2011-10-20 Metasploit remote

CA Total Defense Suite – reGenerateReports Stored procedure SQL Injection (Metasploit)

##

2011-10-02 Metasploit webapps

SurgeFTP 23b6 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49160/info

2011-08-16 Houssam Sahli remote

Adobe RoboHelp 9 – DOM Cross-Site Scripting

Details for the CVE - 2011-2133 - Adobe RoboHelp9 DOM Cross Site

2011-08-11 Roberto Suggi Liverani webapps

SWAT Samba Web Administration Tool – Cross-Site Request Forgery

Thanks & Regards,

2011-07-27 Narendra Shinde webapps

ActivDesk 3.0 – Multiple Vulnerabilities

ActivDesk 3.0 multiple security vulnerabilities

2011-06-23 Brendan Coles webapps

BlackBoard Learn 8.0 – ‘keywordraw’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/48009/info

2011-05-25 Matt Jezorek webapps

showoff! digital media software 1.5.4 – Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/13598/info

2011-05-11 dr_insane webapps

f-fileman 7.0 – Directory Traversal

Advisory:

2011-05-07 Raffaele Forte webapps

Proofpoint Protection Server 5.5.5 – ‘process.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/47687/info

2011-05-03 Karan Khosla webapps

BackupPC 3.x – ‘index.cgi’ Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47628/info

2011-04-28 High-Tech Bridge SA webapps

Cosmoshop 10.05.00 – Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/46828/info

2011-03-10 High-Tech Bridge SA webapps

SmoothWall Express 3.0 – Multiple Vulnerabilities

The web management interface of SmoothWall Express 3.0 is vulnerable

2011-01-17 dave b webapps

SiteScape Enterprise Forum 7 – TCL Injection

#!/usr/bin/env python

2011-01-13 Spencer McIntyre webapps

Mitel AWC – Command Execution

http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr10-14

2010-12-22 Procheckup webapps

gitWeb 1.7.3.3 – Cross-Site Scripting

>-8 Description 8-<

2010-12-15 emgent webapps

Google Urchin 5.7.03 – Local File Inclusion

Summary:

2010-12-15 Kristian Erik Hermansen webapps

BizDir 05.10 – ‘f_srch’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45342/info

2010-12-10 Aliaksandr Hartsuyeu webapps

WWWThread 5.0.8 Pro – ‘showflat.pl’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45303/info

2010-12-09 Aliaksandr Hartsuyeu webapps

AWStats 6.x – Apache Tomcat Configuration File Arbitrary Command Execution

source: https://www.securityfocus.com/bid/45123/info

2010-11-30 StenoPlasma webapps

Skeletonz CMS – Persistent Cross-Site Scripting

# Exploit Title: Xss on skeletonz-simple dynamic cms in the section comments

2010-11-28 Jbyte webapps

SimpLISTic SQL 2.0 – ’email.cgi’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/45040/info

2010-11-24 Aliaksandr Hartsuyeu webapps

Hot Links SQL 3.2 – ‘report.cgi’ SQL Injection

source: https://www.securityfocus.com/bid/45000/info

2010-11-22 Aliaksandr Hartsuyeu webapps

OpenWrt 10.03 – Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/44843/info

2010-11-13 dave b webapps

HP OpenView Network Node Manager (OV NNM) – ‘Snmp.exe’ CGI Buffer Overflow (Metasploit)

##

2010-11-11 Metasploit remote

Alcatel-Lucent OmniPCX Enterprise – masterCGI Arbitrary Command Execution (Metasploit)

##

2010-10-05 Metasploit webapps

Intellicom Netbiter webSCADA Products – ‘read.cgi’ Multiple Remote Security Vulnerabilities

source: https://www.securityfocus.com/bid/43636/info

2010-10-01 Eugene Salov webapps

Barracuda Networks Spam & Virus Firewall 4.1.1.021 – Remote Configuration Retrieval

#!/bin/bash

2010-09-27 ShadowHatesYou webapps

iOffice 0.1 – ‘parametre’ Remote Command Execution

source: https://www.securityfocus.com/bid/41768/info

2010-07-18 Marshall Whittaker webapps

Nagios3 – ‘statuswml.cgi’ ‘Ping’ Command Execution (Metasploit)

##

2010-07-14 Metasploit webapps

DD-WRT HTTPd Daemon/Service – Arbitrary Command Execution (Metasploit)

##

2010-07-07 Metasploit webapps

The Matt Wright Guestbook.pl – Arbitrary Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

QuickTime Streaming Server – ‘parse_xml.cgi’ Remote Execution (Metasploit)

##

2010-07-03 Metasploit webapps

AWStats 6.4 < 6.5 - migrate Remote Command Execution (Metasploit)

##

2010-07-03 Metasploit webapps

Miyabi CGI Tools 1.02 – ‘index.pl’ Remote Command Execution

source: https://www.securityfocus.com/bid/41228/info

2010-06-29 Marshall Whittaker webapps

MoinMoin 1.x – ‘PageEditor.py’ Cross-Site Scripting

source: https://www.securityfocus.com/bid/40549/info

2010-06-03 anonymous webapps

HP OpenView Network Node Manager (OV NNM) – ‘Toolbar.exe’ CGI Buffer Overflow (Metasploit)

##

2010-05-09 Metasploit remote

Digital Factory Publique! 2.3 – ‘sid’ SQL Injection

source: https://www.securityfocus.com/bid/39988/info

2010-05-06 Christophe de la Fuente webapps

Barracuda – IMG.pl Remote Command Execution (Metasploit)

##

2010-04-30 Metasploit webapps

NIBE heat pump – Local File Inclusion

#!/usr/bin/python

2010-04-28 Jelmer de Hen webapps

NIBE heat pump – Remote Code Execution

#!/usr/bin/python

2010-04-28 Jelmer de Hen webapps

Trouble Ticket Software – ‘ttx.cgi’ Arbitrary File Download

# Exploit Title: Trouble Ticket Software 0Day

2010-03-20 n01d webapps