Page 3 of 12 results (0.002 seconds)

CVSS: 3.6EPSS: 0%CPEs: 2EXPL: 0

cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system. • http://marc.info/?l=bugtraq&m=94209954200450&w=2 http://marc.info/?l=bugtraq&m=94225629200045&w=2 http://www.iss.net/security_center/static/7764.php http://www.osvdb.org/35 http://www.securityfocus.com/bid/777 •

CVSS: 10.0EPSS: 1%CPEs: 1EXPL: 0

The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. • http://www.securityfocus.com/bid/558 •