VYPR

Webglimpse

by Webglimpse

CVEs (7)

  • CVE-2009-5114Mar 19, 2012
    risk 0.04cvss epss 0.14

    Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.

  • CVE-2012-1787Mar 19, 2012
    risk 0.03cvss epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in wgarcmin.cgi in Webglimpse 2.20.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) FILE, or (3) DOMAIN parameters.

  • CVE-2009-5112Mar 19, 2012
    risk 0.03cvss epss 0.05

    wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.

  • CVE-2005-4328Dec 17, 2005
    risk 0.03cvss epss 0.02

    Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter.

  • CVE-2012-1795Mar 20, 2012
    risk 0.00cvss epss 0.04

    webglimpse.cgi in Webglimpse before 2.20.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter, as exploited in the wild in March 2012.

  • CVE-2009-5113Mar 19, 2012
    risk 0.00cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter.

  • CVE-2005-4354Dec 20, 2005
    risk 0.00cvss epss 0.01

    Cross-site scripting (XSS) vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter.