CVE-2003-0614

CVE-2003-0614 is a cross-site scripting (XSS) vulnerability in Gallery (web-based photo album) affecting Gallery 1.1 through 1.3.4. The vulnerability resides in search.php, where unsanitized input from the searchstring parameter can be exploited to inject arbitrary JavaScript into a victim’s brow...

Valve Software Half-Life 1.1 Client - Connection Routine Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/8299/info // Half-Life Client has been reported prone to a remotely exploitable buffer overflow condition. // The issue presents itself in the client connection routine, used by the client to negotiate a connection to the Half-Life game server. Due to ...

ScozBook BETA 1.1 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: ScozBook BETA 1.1 vulnerabilities product: ScozBook BETA 1.1 vendor: http://www.scoznet.com risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/018.en.txt http://f0kp.iplus.ru/bz/018.ru.txt...

ScozBook BETA 1.1 vulnerabilities

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: ScozBook BETA 1.1 vulnerabilities product: ScozBook BETA 1.1 vendor: http://www.scoznet.com risk: high date: 03/29/2k3 discovered by: euronymous /F0KP advisory urls: http://f0kp.iplus.ru/bz/018.en.txt http://f0kp.iplus.ru/bz/018.ru.txt...

CVE-2002-1535: Undefined Security Weakness

Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present...

benchmark tool for HTTP pages.

ezhttpbench.php eZ httpbench version 1.1http://developer.ez.no - benchmark tool for HTTP pages. A security vulnerability in the product allows remote attackers to download any file on the local system that the eZ httpbench has read access to. Vulnerable systems: eZ httpbench version 1.1 eZ...

Web Server HTTP 1.1 Header Remote Overflow

It was possible to kill the web server by sending an invalid request with a too long HTTP 1.1 header Accept-Encoding, Accept-Language, Accept-Range, Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE, Host. This vulnerability could be exploited to crash t...

Bypassing TrendMicro InterScan VirusWall

Bypassing TrendMicro InterScan VirusWall Overview According to our tests, TrendMicro VirusWall can be bypassed when using : HTTP 1.1 chunked transfert encoding. HTTP 1.0 gzip content encoding for Windows platforms only. Description While HTTP/1.0 includes the Content-Encoding header, which...

Linuxconf 1.1.x/1.2.x - Local Environment Variable Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/5585/info Linuxconf is a Linux configuration utility from Solucorp. It is typically installed as a setuid root utility for the management and configuration of Linux operating systems. A buffer overflow vulnerability has been reported for Linuxconf. The...

Web Shop Manager Security Vulnerability

Summary The Web Shop Managerhttp://www.webscriptworld.com/scripts/wsm.phtml allows you to manage a fully functional online store from a centralized web-based administration system. A security vulnerability in the product allows executing of arbitrary commands with the privileges of the script fil...

CVE-2002-0730

Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as 1 Name, 2 EMail, or 3 Homepage...

CVE-2002-0730

CVE-2002-0730 : Cross-site scripting in Philip Chinery’s Guestbook 1.1 (guestbook.pl) allows remote attackers to inject Javascript/HTML via form fields such as Name, EMail, or Homepage. The linked sources (NVD/CVE records) confirm the vulnerability and its existence, but do not provide specific e...

CVE-2002-0196

The CVE-2002-0196 entry concerns ACD Incorporated CwpAPI 1.1. The vulnerability lies in GetRelativePath, which only checks if the server root is somewhere within the path rather than strictly preventing access beyond the web root. As a result, remote attackers could read or write files outside th...

Security holes in ForamiX

Product : ForamiX http://www.ptitphp.com Versions : 1.1 Problems : - Admin access - XSS More details in french : http://www.ifrance.com/kitetoua/tuto/ForamiX.txt translated by google : http://translate.google.com/translate?u=http3A 2F2Fwww.ifrance.com2Fkitetoua2Ftuto...

CVE-2001-0963

SpoonFTP Server (version 1.1) is affected by a directory-traversal vulnerability in the CWD command due to inadequate input validation, allowing local users (and in some cases remote users) to access files outside the FTP root with the user’s privileges. CERT/CC notes the impact as reading direct...

Cisco SN 5420 Storage Router vulnerable to DoS via HTTP request containing long headers

Overview It is possible to cause a denial of service of the Cisco SN 5420 Storage Router by sending a HTTP request with a large header. Description A vulnerability has been discovered in the Cisco SN 5420 Storage Router software versions 1.15 and earlier. By sending an HTTP request with a huge...

CVE-2001-0783

CVE-2001-0783 : Cisco TFTP server 1.1 is vulnerable to a remote directory-traversal via the GET command (.. attack) that can read arbitrary files. Official CVSS v2.0 metrics indicate a base score of 5.0 (Network, Low attack complexity, no authentication) with partial confidentiality impact and no...

CVE-2001-0963

Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... modified dot dot in the CD CWD command...

CVE-1999-1072

Excite for Web Servers (EWS) 1.1 is affected by a local-privilege escalation where an attacker who can read Architext.conf (world-readable) can obtain the encrypted password and replay it in an HTTP request to AT-generated.cgi or AT-admin.cgi to gain privileges. Root cause: the password is stored...

CVE-1999-1071

CVE-1999-1071 affects Excite for Web Servers (EWS) 1.1. The Architext.conf authentication file is installed with world-writable permissions, allowing local users to modify the file and gain access to Excite accounts. Root cause: insecure file permissions on the authentication file. Impact: confid...