4114 matches found
PT-2003-1784 · Apache · Apache Web Server
Name of the Vulnerable Software and Affected Versions: Docview versions prior to 1.1-18 Description: The issue allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules in the Apache web server configuration. Recommendations: For versio...
CVE-2003-0589
admin.php in Digi-ads 1.1 allows remote attackers to bypass authentication via a cookie with the username set to the name of the administrator, which satisfies an improper condition in admin.php that does not require a correct password...
CVE-2003-0614
CVE-2003-0614 is a cross-site scripting (XSS) vulnerability in Gallery (web-based photo album) affecting Gallery 1.1 through 1.3.4. The vulnerability resides in search.php, where unsanitized input from the searchstring parameter can be exploited to inject arbitrary JavaScript into a victim’s brow...
Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)
// source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by the client to negotiate a connection to the Half-Life game server. Due to ...
ScozBook BETA 1.1 vulnerabilities
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: ScozBook BETA 1.1 vulnerabilities product: ScozBook BETA 1.1 vendor: http://www.scoznet.com risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/018.en.txt http://f0kp.iplus.ru/bz/018.ru.txt...
ScozBook BETA 1.1 vulnerabilities
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: ScozBook BETA 1.1 vulnerabilities product: ScozBook BETA 1.1 vendor: http://www.scoznet.com risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/018.en.txt http://f0kp.iplus.ru/bz/018.ru.txt...
benchmark tool for HTTP pages.
ezhttpbench.php eZ httpbench version 1.1http://developer.ez.no - benchmark tool for HTTP pages. A security vulnerability in the product allows remote attackers to download any file on the local system that the eZ httpbench has read access to. Vulnerable systems: eZ httpbench version 1.1 eZ...
Web Server HTTP 1.1 Header Remote Overflow
It was possible to kill the web server by sending an invalid request with a too long HTTP 1.1 header Accept-Encoding, Accept-Language, Accept-Range, Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE, Host. This vulnerability could be exploited to crash t...
Bypassing TrendMicro InterScan VirusWall
Bypassing TrendMicro InterScan VirusWall Overview According to our tests, TrendMicro VirusWall can be bypassed when using : HTTP 1.1 chunked transfert encoding. HTTP 1.0 gzip content encoding for Windows platforms only. Description While HTTP/1.0 includes the Content-Encoding header, which...
Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...
Web Shop Manager Security Vulnerability
Summary The Web Shop Managerhttp://www.webscriptworld.com/scripts/wsm.phtml allows you to manage a fully functional online store from a centralized web-based administration system. A security vulnerability in the product allows executing of arbitrary commands with the privileges of the script fil...
CVE-2002-0730
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as 1 Name, 2 EMail, or 3 Homepage...
CVE-2002-0730
CVE-2002-0730 : Cross-site scripting in Philip Chinery’s Guestbook 1.1 (guestbook.pl) allows remote attackers to inject Javascript/HTML via form fields such as Name, EMail, or Homepage. The linked sources (NVD/CVE records) confirm the vulnerability and its existence, but do not provide specific e...
CVE-2002-0196
The CVE-2002-0196 entry concerns ACD Incorporated CwpAPI 1.1. The vulnerability lies in GetRelativePath, which only checks if the server root is somewhere within the path rather than strictly preventing access beyond the web root. As a result, remote attackers could read or write files outside th...
Security holes in ForamiX
Product : ForamiX http://www.ptitphp.com Versions : 1.1 Problems : - Admin access - XSS More details in french : http://www.ifrance.com/kitetoua/tuto/ForamiX.txt translated by google : http://translate.google.com/translate?u=http3A 2F2Fwww.ifrance.com2Fkitetoua2Ftuto...
CVE-2001-0963
SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...
Cisco SN 5420 Storage Router vulnerable to DoS via HTTP request containing long headers
Overview It is possible to cause a denial of service of the Cisco SN 5420 Storage Router by sending a HTTP request with a large header. Description A vulnerability has been discovered in the Cisco SN 5420 Storage Router software versions 1.15 and earlier. By sending an HTTP request with a huge...
CVE-2001-0783
CVE-2001-0783 : Cisco TFTP server 1.1 is vulnerable to a remote directory-traversal via the GET command (.. attack) that can read arbitrary files. Official CVSS v2.0 metrics indicate a base score of 5.0 (Network, Low attack complexity, no authentication) with partial confidentiality impact and no...