ID de Prueba:	1.3.6.1.4.1.25623.1.0.11748
Categoría:	Web application abuses
Título:	Detection of various dangerous CGI scripts (HTTP) - Active Check
Resumen:	Various CGI scripts have known vulnerabilities tracked via the; via the referenced CVE(s).
Descripción:	Summary: Various CGI scripts have known vulnerabilities tracked via the via the referenced CVE(s). Solution: Please take the time to visit cve.mitre.org and check the associated CVE ID for each cgi found. If you are running a vulnerable version, then delete or upgrade the CGI. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1374 Bugtraq: 19990427 Re: Shopping Carts exposing CC data (Google Search) http://marc.info/?l=bugtraq&m=92523159819402&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-1283 BugTraq ID: 3427 http://www.securityfocus.com/bid/3427 Bugtraq: 20011011 Ipswitch Imail 7.04 vulnerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html http://www.ipswitch.com/Support/IMail/news.html Common Vulnerability Exposure (CVE) ID: CVE-2001-0076 BugTraq ID: 2157 http://www.securityfocus.com/bid/2157 Bugtraq: 20001228 Remote vulnerability in Ikonboard upto version 2.1.7b (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html XForce ISS Database: http-cgi-ikonboard(5819) https://exchange.xforce.ibmcloud.com/vulnerabilities/5819 Common Vulnerability Exposure (CVE) ID: CVE-2002-0710 BugTraq ID: 5286 http://www.securityfocus.com/bid/5286 Bugtraq: 20020730 Directory traversal vulnerability in sendform.cgi (Google Search) http://marc.info/?l=bugtraq&m=102809084218422&w=2 http://www.osvdb.org/3568 http://www.iss.net/security_center/static/9725.php Common Vulnerability Exposure (CVE) ID: CVE-2001-1100 BugTraq ID: 3673 http://www.securityfocus.com/bid/3673 Bugtraq: 20011007 Bug found at W3Mail Webmail (Google Search) http://www.securityfocus.com/archive/1/218921 XForce ISS Database: w3mail-metacharacters-command-execution(7230) https://exchange.xforce.ibmcloud.com/vulnerabilities/7230 Common Vulnerability Exposure (CVE) ID: CVE-2002-0346 BugTraq ID: 4211 http://www.securityfocus.com/bid/4211 Bugtraq: 20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=101495944202452&w=2 http://www.iss.net/security_center/static/8321.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0133 BugTraq ID: 2212 http://www.securityfocus.com/bid/2212 Bugtraq: 20010114 Trend Micro's VirusWall: Multiple vunerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html Common Vulnerability Exposure (CVE) ID: CVE-2001-0022 BugTraq ID: 2106 http://www.securityfocus.com/bid/2106 Bugtraq: 20001213 Re: Insecure input validation in simplestmail.cgi (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html XForce ISS Database: http-cgi-simplestguest(5743) https://exchange.xforce.ibmcloud.com/vulnerabilities/5743 Common Vulnerability Exposure (CVE) ID: CVE-2001-0420 BugTraq ID: 2547 http://www.securityfocus.com/bid/2547 Bugtraq: 20010409 talkback.cgi vulnerability may allow users to read any file (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-04/0128.html Common Vulnerability Exposure (CVE) ID: CVE-2002-0203 Bugtraq: 20020124 ISSTW Security Advisory Tarantella Enterprise 3.11.903 Directory Index Disclosure Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101190195430376&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-1343 BugTraq ID: 2861 http://www.securityfocus.com/bid/2861 Bugtraq: 20010612 bug (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html XForce ISS Database: webstore-cgi-command-execution(6685) https://exchange.xforce.ibmcloud.com/vulnerabilities/6685 Common Vulnerability Exposure (CVE) ID: CVE-2002-0917 BugTraq ID: 4885 http://www.securityfocus.com/bid/4885 Bugtraq: 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities (Google Search) http://online.securityfocus.com/archive/1/274727 http://www.iss.net/security_center/static/9220.php Common Vulnerability Exposure (CVE) ID: CVE-2003-0153 BugTraq ID: 5517 http://www.securityfocus.com/bid/5517 Bugtraq: 20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=102980129101054&w=2 Debian Security Information: DSA-265 (Google Search) http://www.debian.org/security/2003/dsa-265 XForce ISS Database: bonsai-path-disclosure(9921) https://exchange.xforce.ibmcloud.com/vulnerabilities/9921 Common Vulnerability Exposure (CVE) ID: CVE-2000-0423 BugTraq ID: 1172 http://www.securityfocus.com/bid/1172 Bugtraq: 20000505 Alert: DNewsWeb buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=95764950403250&w=2 XForce ISS Database: http-cgi-dnews-bo Common Vulnerability Exposure (CVE) ID: CVE-1999-1377 http://pulhas.org/phrack/55/P55-07.html Common Vulnerability Exposure (CVE) ID: CVE-2001-1196 BugTraq ID: 3698 http://www.securityfocus.com/bid/3698 Bugtraq: 20011217 webmin 0.91 ../.. problem (Google Search) http://www.securityfocus.com/archive/1/245980 Bugtraq: 20011218 Re: webmin 0.91 ../.. problem (Google Search) http://marc.info/?l=webmin-l&m=100865390306103&w=2 http://www.iss.net/security_center/static/7711.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1526 BugTraq ID: 5824 http://www.securityfocus.com/bid/5824 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html http://www.iss.net/security_center/static/10205.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0023 BugTraq ID: 2101 http://www.securityfocus.com/bid/2101 Bugtraq: 20001211 Insecure input validation in everythingform.cgi (remote command execution) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html XForce ISS Database: http-cgi-everythingform(5736) https://exchange.xforce.ibmcloud.com/vulnerabilities/5736 Common Vulnerability Exposure (CVE) ID: CVE-2002-0263 BugTraq ID: 4068 http://www.securityfocus.com/bid/4068 Bugtraq: 20020211 EasyBoard 2000 Remote Buffer Overflow Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101345069220199&w=2 http://www.iss.net/security_center/static/8162.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0611 http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html http://www.iss.net/security_center/static/8858.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0230 Bugtraq: 20020204 [SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability] (Google Search) http://marc.info/?l=bugtraq&m=101285834018701&w=2 Bugtraq: 20020205 Faq-O-Matic Cross-Site Scripting (Google Search) http://marc.info/?l=bugtraq&m=101293973111873&w=2 Debian Security Information: DSA-109 (Google Search) http://www.debian.org/security/2002/dsa-109 Common Vulnerability Exposure (CVE) ID: CVE-2000-1131 BugTraq ID: 1940 http://www.securityfocus.com/bid/1940 Bugtraq: 20001110 [hacksware] gbook.cgi remote command execution vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-11/0144.html XForce ISS Database: gbook-cgi-remote-execution(5509) https://exchange.xforce.ibmcloud.com/vulnerabilities/5509 Common Vulnerability Exposure (CVE) ID: CVE-2000-0288 Bugtraq: 20000412 Infonautic's getdoc.cgi may allow unauthorized access to documents (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html Common Vulnerability Exposure (CVE) ID: CVE-2000-0952 FreeBSD Security Advisory: FreeBSD-SA-00:64 NETBSD Security Advisory: NetBSD-SA2000-014 ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc http://www.osvdb.org/6486 XForce ISS Database: global-execute-remote-commands(5424) https://exchange.xforce.ibmcloud.com/vulnerabilities/5424 Common Vulnerability Exposure (CVE) ID: CVE-2001-0180 Bugtraq: 20010129 Remote Command Execution in guestserver.cgi + exploit (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html XForce ISS Database: guestserver-cgi-execute-commands(6027) https://exchange.xforce.ibmcloud.com/vulnerabilities/6027 Common Vulnerability Exposure (CVE) ID: CVE-2002-1334 BugTraq ID: 6265 http://www.securityfocus.com/bid/6265 Bugtraq: 20021127 Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software (Google Search) http://marc.info/?l=bugtraq&m=103842773205148&w=2 http://securitytracker.com/id?1005681 XForce ISS Database: imagefolio-imagefolio-nphbuild-xss(10718) https://exchange.xforce.ibmcloud.com/vulnerabilities/10718 Common Vulnerability Exposure (CVE) ID: CVE-2001-1205 BugTraq ID: 3754 http://www.securityfocus.com/bid/3754 Bugtraq: 20011230 lastlines.cgi path traversal and command execution vulns (Google Search) http://marc.info/?l=bugtraq&m=100975978324723&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2000-0977 BugTraq ID: 1807 http://www.securityfocus.com/bid/1807 Bugtraq: 20001011 Mail File POST Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html XForce ISS Database: mailfile-post-file-read(5358) https://exchange.xforce.ibmcloud.com/vulnerabilities/5358 Common Vulnerability Exposure (CVE) ID: CVE-2000-0526 BugTraq ID: 1335 http://www.securityfocus.com/bid/1335 Bugtraq: 20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4] (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html Common Vulnerability Exposure (CVE) ID: CVE-2000-1023 BugTraq ID: 1710 http://www.securityfocus.com/bid/1710 Bugtraq: 20000924 Major Vulnerability in Alabanza Control Panel (Google Search) http://www.securityfocus.com/archive/1/84766 XForce ISS Database: alabanza-unauthorized-access(5284) https://exchange.xforce.ibmcloud.com/vulnerabilities/5284 Common Vulnerability Exposure (CVE) ID: CVE-1999-0937 EL8 advisory: 19981203 BNBForm (bnbform.cgi) https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937 Common Vulnerability Exposure (CVE) ID: CVE-2001-0099 Bugtraq: 20001221 BS Scripts Vulnerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html http://www.stanback.net/ XForce ISS Database: bsguest-cgi-execute-commands(5796) https://exchange.xforce.ibmcloud.com/vulnerabilities/5796 Common Vulnerability Exposure (CVE) ID: CVE-2001-0100 XForce ISS Database: bslist-cgi-execute-commands(5797) https://exchange.xforce.ibmcloud.com/vulnerabilities/5797 Common Vulnerability Exposure (CVE) ID: CVE-2001-1212 BugTraq ID: 3714 http://www.securityfocus.com/bid/3714 Bugtraq: 20011218 Aktivate Shopping System Cross Site Scripting Vulnerability (Google Search) http://www.securityfocus.com/archive/1/246274 http://www.iss.net/security_center/static/7717.php Common Vulnerability Exposure (CVE) ID: CVE-2000-1132 BugTraq ID: 1951 http://www.securityfocus.com/bid/1951 Bugtraq: 20001114 Cgisecurity.com advisory on dcforum (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html http://www.osvdb.org/1646 XForce ISS Database: dcforum-cgi-view-files(5533) https://exchange.xforce.ibmcloud.com/vulnerabilities/5533 Common Vulnerability Exposure (CVE) ID: CVE-1999-0934 BugTraq ID: 2020 http://www.securityfocus.com/bid/2020 EL8 advisory: 19991215 Classifieds (classifieds.cgi) XForce ISS Database: http-cgi-classifieds-read(3102) https://exchange.xforce.ibmcloud.com/vulnerabilities/3102 Common Vulnerability Exposure (CVE) ID: CVE-1999-0935 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935 Common Vulnerability Exposure (CVE) ID: CVE-1999-0936 EL8 advisory: 19981203 BNBSurvey (survey.cgi) https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936 Common Vulnerability Exposure (CVE) ID: CVE-1999-1072 Bugtraq: 19981130 Security bugs in Excite for Web Servers 1.1 (Google Search) http://marc.info/?l=bugtraq&m=91248445931140&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2000-0923 BugTraq ID: 1784 http://www.securityfocus.com/bid/1784 Bugtraq: 20001006 Fwd: APlio PRO web shell (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html XForce ISS Database: uclinux-apliophone-bin-execute(5333) https://exchange.xforce.ibmcloud.com/vulnerabilities/5333 Common Vulnerability Exposure (CVE) ID: CVE-2001-0123 BugTraq ID: 2177 http://www.securityfocus.com/bid/2177 Bugtraq: 20010107 Cgisecurity.com Advisory #3.1 (Google Search) http://marc.info/?l=bugtraq&m=97905792214999&w=2 http://www.osvdb.org/3546 XForce ISS Database: http-cgi-bbs-forum(5906) https://exchange.xforce.ibmcloud.com/vulnerabilities/5906 Common Vulnerability Exposure (CVE) ID: CVE-2001-0135 BugTraq ID: 2197 http://www.securityfocus.com/bid/2197 Bugtraq: 20010112 UltraBoard cgi directory permission problem (Google Search) http://marc.info/?l=bugtraq&m=97933458505857&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-0562 BugTraq ID: 2705 http://www.securityfocus.com/bid/2705 Bugtraq: 20010507 Advisory for A1Stats (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html XForce ISS Database: a1stats-a1admin-dos(6505) https://exchange.xforce.ibmcloud.com/vulnerabilities/6505 Common Vulnerability Exposure (CVE) ID: CVE-2002-0749 BugTraq ID: 4579 http://www.securityfocus.com/bid/4579 Bugtraq: 20020423 CGIscript.net - csMailto.cgi - Remote Command Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html http://www.iss.net/security_center/static/8930.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0750 http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5 Common Vulnerability Exposure (CVE) ID: CVE-2002-0751 Common Vulnerability Exposure (CVE) ID: CVE-2002-0752 Common Vulnerability Exposure (CVE) ID: CVE-2002-0955 BugTraq ID: 5078 http://www.securityfocus.com/bid/5078 Bugtraq: 20020621 [AP] YaBB Cross-Site Scripting vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html http://www.iss.net/security_center/static/9408.php Common Vulnerability Exposure (CVE) ID: CVE-2004-0251 BugTraq ID: 9575 http://www.securityfocus.com/bid/9575 Bugtraq: 20040204 rxgoogle.cgi XSS Vulnerability. (Google Search) http://marc.info/?l=bugtraq&m=107594183924958&w=2 XForce ISS Database: rxgoogle-query-xss(15043) https://exchange.xforce.ibmcloud.com/vulnerabilities/15043 Common Vulnerability Exposure (CVE) ID: CVE-2004-0665 BugTraq ID: 10618 http://www.securityfocus.com/bid/10618 Bugtraq: 20040628 Full path disclosure csFAQ (Google Search) http://marc.info/?l=bugtraq&m=108844203121238&w=2 http://www.swp-zone.org/archivos/advisory-08.txt XForce ISS Database: csfaq-path-disclosure(16526) https://exchange.xforce.ibmcloud.com/vulnerabilities/16526 Common Vulnerability Exposure (CVE) ID: CVE-2004-0696 @stake Security Advisory: A071304-1 http://www.atstake.com/research/advisories/2004/a071304-1.txt BugTraq ID: 10721 http://www.securityfocus.com/bid/10721 ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt XForce ISS Database: 4dwebstar-view-directory-listing(16687) https://exchange.xforce.ibmcloud.com/vulnerabilities/16687 Common Vulnerability Exposure (CVE) ID: CVE-2004-0734 BugTraq ID: 10744 http://www.securityfocus.com/bid/10744 Bugtraq: 20040717 Web_Store.cgi allows Command Execution (Google Search) http://marc.info/?l=bugtraq&m=109008402715874&w=2 XForce ISS Database: extropia-webstore-command-execution(16710) https://exchange.xforce.ibmcloud.com/vulnerabilities/16710
Copyright	Copyright (C) 2003 John Lampe

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.