post avatar

Old-school Remote Command Exec Vulnerabilities on Avaya Intuity

This post is gonna be a quick one, since it’s nothing more than the result of me tiding up my pendrive files.

Remember those old remote command exec vulns where you had a CGI script such as a perl program which would take input from the client to construct command strings that would then be passed to the shell environment? Well, there were tons of those affecting diagnostic scripts available on the web interface of Avaya Intuity Audix LX. [...]

» more | » comments | » comments rss | posted by pagvac

test your web apps with websecurify application security testing runtime

The Others

from the creators of GNUCITIZEN we bring to you...