CVE-2009-4530

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

Code injection

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs...

CVE-2009-4530

CVE-2009-4530 affects Mongoose Web Server (2.8.0 and earlier). Vulnerability: remote disclosure of page source by appending ::$DATA to the URI, enabling partial confidentiality impact. Core cause is a web server source code disclosure path handling flaw. No explicit exploitation details or in-the...

CVE-2009-4531

CVE-2009-4531 affects httpdx 1.4.4 and earlier, enabling remote disclosure of web-page source code by appending a dot to the URI. The vulnerability is described consistently across sources as a server-side flaw in handling specific request syntax, allowing partial disclosure of scripts or page co...

CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4530

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4529

NaviCOPA Web Server (3.0.1.2 and earlier) is affected by CVE-2009-4529. A trailing encoded space in a request URI (e.g., /index.html%20 or /index.php%20) can disclose the server-side source code of pages/CGIs to a remote attacker. Affected product is NaviCOPA Web Server; root cause is improper ha...

CVE-2009-4530: Exposure of Sensitive Information to an Unauthorized Actor

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4529: Exposure of Sensitive Information to an Unauthorized Actor

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs...

CVE-2009-4531: Exposure of Sensitive Information to an Unauthorized Actor

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4535: Exposure of Sensitive Information to an Unauthorized Actor

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

PhotoDiary 1.3 - lng Local File Inclusion

PhotoDiary 1.3 - lng Local File Inclusion PhotoDiary 1.3 lng Local File Inclusion Vulnerability Discovered by cOndemned download: http://code.google.com/p/photodiary/ source of /admin/install.php lines 9 - 15: if isset$GET'lng' $LNG = $GET'lng'; 1 else $LNG = "ITA"; include...

PhotoDiary 1.3 (lng) LFI Vulnerability

No description provided by source. PhotoDiary 1.3 lng Local File Inclusion Vulnerability Discovered by cOndemned download: http://code.google.com/p/photodiary/ source of /admin/install.php lines 9 - 15: if isset$GET'lng' $LNG = $GET'lng'; 1 else $LNG = "ITA"; include...

PT-2009-6633 · Mongoose · Mongoose

Name of the Vulnerable Software and Affected Versions: Mongoose versions 2.8.0 and earlier Description: The issue allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI. Recommendations: For versions 2.8.0 and earlier, update to a version late...

PT-2009-6629 · Httpdx · Httpdx

Name of the Vulnerable Software and Affected Versions: httpdx versions 1.4.4 and earlier Description: The issue allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI. Recommendations: For httpdx versions 1.4.4 and earlier, consider restricting...

PhotoDiary 1.3 - 'lng' Local File Inclusion

PhotoDiary 1.3 lng Local File Inclusion Vulnerability Discovered by cOndemned download: http://code.google.com/p/photodiary/ source of /admin/install.php lines 9 - 15: if isset$GET'lng' $LNG = $GET'lng'; 1 else $LNG = "ITA"; include "../common/language".$LNG.".php"; 2 proof of concept:...

Tomcat 4.0.10 自带Servlet可导致源码泄漏漏洞

No description provided by source...

Microsoft IIS WebDAV Request Source Code Disclosure

The Internet Information Server IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a Web server service that is capable of serving static, as well as dynamic content. The Web server is equipped with the Active Server Pages ASP...

Xerver服务器HTTP请求源码泄露漏洞

CVE ID: CVE-2009-3544 Xerver是一个免费的包括Web与FTP的服务器。 远程攻击者可以通过向Xerver HTTP服务器提交文件名前附加了::$DATA的特制HTTP请求泄露所请求文件的内容。 Xerver 4.32 厂商补丁： Xerver ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.javascript.nu/xerver/ http://172.16.2.101/index.html::$DATA http://172.16.2.101/default.asp::$DA...