Test ID:	1.3.6.1.4.1.25623.1.0.11748
Category:	Web application abuses
Title:	Detection of various dangerous CGI scripts (HTTP) - Active Check
Summary:	Various CGI scripts have known vulnerabilities tracked via the; via the referenced CVE(s).
Description:	Summary: Various CGI scripts have known vulnerabilities tracked via the via the referenced CVE(s). Solution: Please take the time to visit cve.mitre.org and check the associated CVE ID for each cgi found. If you are running a vulnerable version, then delete or upgrade the CGI. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-1374 Bugtraq: 19990427 Re: Shopping Carts exposing CC data (Google Search) http://marc.info/?l=bugtraq&m=92523159819402&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-1283 BugTraq ID: 3427 http://www.securityfocus.com/bid/3427 Bugtraq: 20011011 Ipswitch Imail 7.04 vulnerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html http://www.ipswitch.com/Support/IMail/news.html Common Vulnerability Exposure (CVE) ID: CVE-2001-0076 BugTraq ID: 2157 http://www.securityfocus.com/bid/2157 Bugtraq: 20001228 Remote vulnerability in Ikonboard upto version 2.1.7b (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0483.html XForce ISS Database: http-cgi-ikonboard(5819) https://exchange.xforce.ibmcloud.com/vulnerabilities/5819 Common Vulnerability Exposure (CVE) ID: CVE-2002-0710 BugTraq ID: 5286 http://www.securityfocus.com/bid/5286 Bugtraq: 20020730 Directory traversal vulnerability in sendform.cgi (Google Search) http://marc.info/?l=bugtraq&m=102809084218422&w=2 http://www.osvdb.org/3568 http://www.iss.net/security_center/static/9725.php Common Vulnerability Exposure (CVE) ID: CVE-2001-1100 BugTraq ID: 3673 http://www.securityfocus.com/bid/3673 Bugtraq: 20011007 Bug found at W3Mail Webmail (Google Search) http://www.securityfocus.com/archive/1/218921 XForce ISS Database: w3mail-metacharacters-command-execution(7230) https://exchange.xforce.ibmcloud.com/vulnerabilities/7230 Common Vulnerability Exposure (CVE) ID: CVE-2002-0346 BugTraq ID: 4211 http://www.securityfocus.com/bid/4211 Bugtraq: 20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=101495944202452&w=2 http://www.iss.net/security_center/static/8321.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0133 BugTraq ID: 2212 http://www.securityfocus.com/bid/2212 Bugtraq: 20010114 Trend Micro's VirusWall: Multiple vunerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-01/0235.html Common Vulnerability Exposure (CVE) ID: CVE-2001-0022 BugTraq ID: 2106 http://www.securityfocus.com/bid/2106 Bugtraq: 20001213 Re: Insecure input validation in simplestmail.cgi (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0168.html XForce ISS Database: http-cgi-simplestguest(5743) https://exchange.xforce.ibmcloud.com/vulnerabilities/5743 Common Vulnerability Exposure (CVE) ID: CVE-2001-0420 BugTraq ID: 2547 http://www.securityfocus.com/bid/2547 Bugtraq: 20010409 talkback.cgi vulnerability may allow users to read any file (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-04/0128.html Common Vulnerability Exposure (CVE) ID: CVE-2002-0203 Bugtraq: 20020124 ISSTW Security Advisory Tarantella Enterprise 3.11.903 Directory Index Disclosure Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101190195430376&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-1343 BugTraq ID: 2861 http://www.securityfocus.com/bid/2861 Bugtraq: 20010612 bug (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-06/0142.html XForce ISS Database: webstore-cgi-command-execution(6685) https://exchange.xforce.ibmcloud.com/vulnerabilities/6685 Common Vulnerability Exposure (CVE) ID: CVE-2002-0917 BugTraq ID: 4885 http://www.securityfocus.com/bid/4885 Bugtraq: 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities (Google Search) http://online.securityfocus.com/archive/1/274727 http://www.iss.net/security_center/static/9220.php Common Vulnerability Exposure (CVE) ID: CVE-2003-0153 BugTraq ID: 5517 http://www.securityfocus.com/bid/5517 Bugtraq: 20020819 Advisory: Bonsai XSS and Physical Path Revealing Vulnerabilities (Google Search) http://marc.info/?l=bugtraq&m=102980129101054&w=2 Debian Security Information: DSA-265 (Google Search) http://www.debian.org/security/2003/dsa-265 XForce ISS Database: bonsai-path-disclosure(9921) https://exchange.xforce.ibmcloud.com/vulnerabilities/9921 Common Vulnerability Exposure (CVE) ID: CVE-2000-0423 BugTraq ID: 1172 http://www.securityfocus.com/bid/1172 Bugtraq: 20000505 Alert: DNewsWeb buffer overflow (Google Search) http://marc.info/?l=bugtraq&m=95764950403250&w=2 XForce ISS Database: http-cgi-dnews-bo Common Vulnerability Exposure (CVE) ID: CVE-1999-1377 http://pulhas.org/phrack/55/P55-07.html Common Vulnerability Exposure (CVE) ID: CVE-2001-1196 BugTraq ID: 3698 http://www.securityfocus.com/bid/3698 Bugtraq: 20011217 webmin 0.91 ../.. problem (Google Search) http://www.securityfocus.com/archive/1/245980 Bugtraq: 20011218 Re: webmin 0.91 ../.. problem (Google Search) http://marc.info/?l=webmin-l&m=100865390306103&w=2 http://www.iss.net/security_center/static/7711.php Common Vulnerability Exposure (CVE) ID: CVE-2002-1526 BugTraq ID: 5824 http://www.securityfocus.com/bid/5824 http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html http://www.iss.net/security_center/static/10205.php Common Vulnerability Exposure (CVE) ID: CVE-2001-0023 BugTraq ID: 2101 http://www.securityfocus.com/bid/2101 Bugtraq: 20001211 Insecure input validation in everythingform.cgi (remote command execution) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0137.html XForce ISS Database: http-cgi-everythingform(5736) https://exchange.xforce.ibmcloud.com/vulnerabilities/5736 Common Vulnerability Exposure (CVE) ID: CVE-2002-0263 BugTraq ID: 4068 http://www.securityfocus.com/bid/4068 Bugtraq: 20020211 EasyBoard 2000 Remote Buffer Overflow Vulnerability (Google Search) http://marc.info/?l=bugtraq&m=101345069220199&w=2 http://www.iss.net/security_center/static/8162.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0611 http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html http://www.iss.net/security_center/static/8858.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0230 Bugtraq: 20020204 [SUPERPETZ ADVISORY #002- Faq-O-Matic Cross-Site Scripting Vulnerability] (Google Search) http://marc.info/?l=bugtraq&m=101285834018701&w=2 Bugtraq: 20020205 Faq-O-Matic Cross-Site Scripting (Google Search) http://marc.info/?l=bugtraq&m=101293973111873&w=2 Debian Security Information: DSA-109 (Google Search) http://www.debian.org/security/2002/dsa-109 Common Vulnerability Exposure (CVE) ID: CVE-2000-1131 BugTraq ID: 1940 http://www.securityfocus.com/bid/1940 Bugtraq: 20001110 [hacksware] gbook.cgi remote command execution vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-11/0144.html XForce ISS Database: gbook-cgi-remote-execution(5509) https://exchange.xforce.ibmcloud.com/vulnerabilities/5509 Common Vulnerability Exposure (CVE) ID: CVE-2000-0288 Bugtraq: 20000412 Infonautic's getdoc.cgi may allow unauthorized access to documents (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-04/0049.html Common Vulnerability Exposure (CVE) ID: CVE-2000-0952 FreeBSD Security Advisory: FreeBSD-SA-00:64 NETBSD Security Advisory: NetBSD-SA2000-014 ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/advisories/NetBSD-SA2000-014.txt.asc http://www.osvdb.org/6486 XForce ISS Database: global-execute-remote-commands(5424) https://exchange.xforce.ibmcloud.com/vulnerabilities/5424 Common Vulnerability Exposure (CVE) ID: CVE-2001-0180 Bugtraq: 20010129 Remote Command Execution in guestserver.cgi + exploit (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-01/0471.html XForce ISS Database: guestserver-cgi-execute-commands(6027) https://exchange.xforce.ibmcloud.com/vulnerabilities/6027 Common Vulnerability Exposure (CVE) ID: CVE-2002-1334 BugTraq ID: 6265 http://www.securityfocus.com/bid/6265 Bugtraq: 20021127 Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software (Google Search) http://marc.info/?l=bugtraq&m=103842773205148&w=2 http://securitytracker.com/id?1005681 XForce ISS Database: imagefolio-imagefolio-nphbuild-xss(10718) https://exchange.xforce.ibmcloud.com/vulnerabilities/10718 Common Vulnerability Exposure (CVE) ID: CVE-2001-1205 BugTraq ID: 3754 http://www.securityfocus.com/bid/3754 Bugtraq: 20011230 lastlines.cgi path traversal and command execution vulns (Google Search) http://marc.info/?l=bugtraq&m=100975978324723&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2000-0977 BugTraq ID: 1807 http://www.securityfocus.com/bid/1807 Bugtraq: 20001011 Mail File POST Vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-10/0172.html XForce ISS Database: mailfile-post-file-read(5358) https://exchange.xforce.ibmcloud.com/vulnerabilities/5358 Common Vulnerability Exposure (CVE) ID: CVE-2000-0526 BugTraq ID: 1335 http://www.securityfocus.com/bid/1335 Bugtraq: 20000609 Mailstudio2000 CGI Vulnerabilities [S0ftPj.4] (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-06/0081.html Common Vulnerability Exposure (CVE) ID: CVE-2000-1023 BugTraq ID: 1710 http://www.securityfocus.com/bid/1710 Bugtraq: 20000924 Major Vulnerability in Alabanza Control Panel (Google Search) http://www.securityfocus.com/archive/1/84766 XForce ISS Database: alabanza-unauthorized-access(5284) https://exchange.xforce.ibmcloud.com/vulnerabilities/5284 Common Vulnerability Exposure (CVE) ID: CVE-1999-0937 EL8 advisory: 19981203 BNBForm (bnbform.cgi) https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0937 Common Vulnerability Exposure (CVE) ID: CVE-2001-0099 Bugtraq: 20001221 BS Scripts Vulnerabilities (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-12/0390.html http://www.stanback.net/ XForce ISS Database: bsguest-cgi-execute-commands(5796) https://exchange.xforce.ibmcloud.com/vulnerabilities/5796 Common Vulnerability Exposure (CVE) ID: CVE-2001-0100 XForce ISS Database: bslist-cgi-execute-commands(5797) https://exchange.xforce.ibmcloud.com/vulnerabilities/5797 Common Vulnerability Exposure (CVE) ID: CVE-2001-1212 BugTraq ID: 3714 http://www.securityfocus.com/bid/3714 Bugtraq: 20011218 Aktivate Shopping System Cross Site Scripting Vulnerability (Google Search) http://www.securityfocus.com/archive/1/246274 http://www.iss.net/security_center/static/7717.php Common Vulnerability Exposure (CVE) ID: CVE-2000-1132 BugTraq ID: 1951 http://www.securityfocus.com/bid/1951 Bugtraq: 20001114 Cgisecurity.com advisory on dcforum (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html http://www.osvdb.org/1646 XForce ISS Database: dcforum-cgi-view-files(5533) https://exchange.xforce.ibmcloud.com/vulnerabilities/5533 Common Vulnerability Exposure (CVE) ID: CVE-1999-0934 BugTraq ID: 2020 http://www.securityfocus.com/bid/2020 EL8 advisory: 19991215 Classifieds (classifieds.cgi) XForce ISS Database: http-cgi-classifieds-read(3102) https://exchange.xforce.ibmcloud.com/vulnerabilities/3102 Common Vulnerability Exposure (CVE) ID: CVE-1999-0935 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0935 Common Vulnerability Exposure (CVE) ID: CVE-1999-0936 EL8 advisory: 19981203 BNBSurvey (survey.cgi) https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0936 Common Vulnerability Exposure (CVE) ID: CVE-1999-1072 Bugtraq: 19981130 Security bugs in Excite for Web Servers 1.1 (Google Search) http://marc.info/?l=bugtraq&m=91248445931140&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2000-0923 BugTraq ID: 1784 http://www.securityfocus.com/bid/1784 Bugtraq: 20001006 Fwd: APlio PRO web shell (Google Search) http://archives.neohapsis.com/archives/bugtraq/2000-10/0107.html XForce ISS Database: uclinux-apliophone-bin-execute(5333) https://exchange.xforce.ibmcloud.com/vulnerabilities/5333 Common Vulnerability Exposure (CVE) ID: CVE-2001-0123 BugTraq ID: 2177 http://www.securityfocus.com/bid/2177 Bugtraq: 20010107 Cgisecurity.com Advisory #3.1 (Google Search) http://marc.info/?l=bugtraq&m=97905792214999&w=2 http://www.osvdb.org/3546 XForce ISS Database: http-cgi-bbs-forum(5906) https://exchange.xforce.ibmcloud.com/vulnerabilities/5906 Common Vulnerability Exposure (CVE) ID: CVE-2001-0135 BugTraq ID: 2197 http://www.securityfocus.com/bid/2197 Bugtraq: 20010112 UltraBoard cgi directory permission problem (Google Search) http://marc.info/?l=bugtraq&m=97933458505857&w=2 Common Vulnerability Exposure (CVE) ID: CVE-2001-0562 BugTraq ID: 2705 http://www.securityfocus.com/bid/2705 Bugtraq: 20010507 Advisory for A1Stats (Google Search) http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html XForce ISS Database: a1stats-a1admin-dos(6505) https://exchange.xforce.ibmcloud.com/vulnerabilities/6505 Common Vulnerability Exposure (CVE) ID: CVE-2002-0749 BugTraq ID: 4579 http://www.securityfocus.com/bid/4579 Bugtraq: 20020423 CGIscript.net - csMailto.cgi - Remote Command Execution (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html http://www.iss.net/security_center/static/8930.php Common Vulnerability Exposure (CVE) ID: CVE-2002-0750 http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5 Common Vulnerability Exposure (CVE) ID: CVE-2002-0751 Common Vulnerability Exposure (CVE) ID: CVE-2002-0752 Common Vulnerability Exposure (CVE) ID: CVE-2002-0955 BugTraq ID: 5078 http://www.securityfocus.com/bid/5078 Bugtraq: 20020621 [AP] YaBB Cross-Site Scripting vulnerability (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-06/0261.html http://www.iss.net/security_center/static/9408.php Common Vulnerability Exposure (CVE) ID: CVE-2004-0251 BugTraq ID: 9575 http://www.securityfocus.com/bid/9575 Bugtraq: 20040204 rxgoogle.cgi XSS Vulnerability. (Google Search) http://marc.info/?l=bugtraq&m=107594183924958&w=2 XForce ISS Database: rxgoogle-query-xss(15043) https://exchange.xforce.ibmcloud.com/vulnerabilities/15043 Common Vulnerability Exposure (CVE) ID: CVE-2004-0665 BugTraq ID: 10618 http://www.securityfocus.com/bid/10618 Bugtraq: 20040628 Full path disclosure csFAQ (Google Search) http://marc.info/?l=bugtraq&m=108844203121238&w=2 http://www.swp-zone.org/archivos/advisory-08.txt XForce ISS Database: csfaq-path-disclosure(16526) https://exchange.xforce.ibmcloud.com/vulnerabilities/16526 Common Vulnerability Exposure (CVE) ID: CVE-2004-0696 @stake Security Advisory: A071304-1 http://www.atstake.com/research/advisories/2004/a071304-1.txt BugTraq ID: 10721 http://www.securityfocus.com/bid/10721 ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt XForce ISS Database: 4dwebstar-view-directory-listing(16687) https://exchange.xforce.ibmcloud.com/vulnerabilities/16687 Common Vulnerability Exposure (CVE) ID: CVE-2004-0734 BugTraq ID: 10744 http://www.securityfocus.com/bid/10744 Bugtraq: 20040717 Web_Store.cgi allows Command Execution (Google Search) http://marc.info/?l=bugtraq&m=109008402715874&w=2 XForce ISS Database: extropia-webstore-command-execution(16710) https://exchange.xforce.ibmcloud.com/vulnerabilities/16710
Copyright	Copyright (C) 2003 John Lampe

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.