Most recent entries from all

fkie_cve-2009-2300

2026-11-12T07:42:51.310198+00:00

GHSA-hv3m-h9vv-rfcv

2026-11-12T07:42:51.310291+00:00

gsd-2009-2300

2026-11-12T07:42:51.310315+00:00

gsd-2009-2300

VAR-200907-0122

2026-11-12T07:42:51.310330+00:00

The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request. Airlock Web Application Firewall is prone to a denial-of-service vulnerability. CGI requests specify large width and height parameters for images. ----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)

If not, then implement it through the most reliable vulnerability intelligence source on the market.

Implement it through Secunia.

For more information visit: http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to discuss how we can help you with our capabilities contact us at: sales@secunia.com

----------------------------------------------------------------------

TITLE: phion airlock Web Application Firewall Command Injection Vulnerability

SECUNIA ADVISORY ID: SA35641

VERIFY ADVISORY: http://secunia.com/advisories/35641/

DESCRIPTION: A vulnerability has been reported in phion airlock Web Application Firewall, which can be exploited by malicious people to compromise a vulnerable system.

Input passed via certain unspecified parameters is not properly sanitised before being used. T…