Apache mod_proxy - Reverse Proxy Exposure

Apache modproxy - Reverse Proxy Exposure !/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url +...

Apache mod_proxy Proof Of Concept

!/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get = "GET " + url + "@" + internaltarget + ":" + internalport...

CVE-2011-3368

creationtimestamp| type| source ---|---|--- 2011-10-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17969 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rewriteproxybypass.rb 2022-10-27 07:57:43+00:00|...

Mandriva Update for apache MDVSA-2011:144 (apache)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Linux Security Advisory : apache (MDVSA-2011:144)

A vulnerability has been discovered and corrected in apache : The modproxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of 1 RewriteRule and 2 ProxyPassMatch pattern matches for configuration of a reverse...

Mandriva Update for apache MDVSA-2011:144 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2011:144 apache Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Apache mod_proxy Reverse Proxy Exposure Vulnerability PoC

Exploit for multiple platform in category remote exploits !/usr/bin/env python import socket import string import getopt, sys knownports = 0,21,22,23,25,53,69,80,110,137,139,443,445,3306,3389,5432,5900,8080 def sendrequesturl, apachetarget, apacheport, internaltarget, internalport, resource: get ...

BELL-CVE-2011-3368 CVE-2011-3368 does not affect BellSoft software

Bulletin has no description...

CVE-2011-3368

CVE-2011-3368 affects the Apache HTTP Server’s mod_proxy in reverse-proxy configurations. The vulnerability arises when using (1) RewriteRule with the [P] flag or (2) ProxyPassMatch; a remote attacker can craft a URI starting with an initial @ character to force the proxy to connect to an interna...

CVE-2009-3368

Cross-site scripting XSS vulnerability in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php...

CVE-2009-3368

CVE-2009-3368 concerns a cross-site scripting (XSS) flaw in the Joomla! Hotel Booking Reservation System (HBS/com_hbssearch). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the adult parameter in the showhoteldetails action to index.php. No remediation or exp...

CVE-2009-3368

creationtimestamp| type| source ---|---|--- 2009-09-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9648...

CVE-2008-3368

creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6153...

CVE-2007-3368

CVE-2007-3368 describes a buffer overflow in the HTTP server of Polycom SoundPoint IP 601 SIP phones with BootROM 3.0.x+ that can be triggered by a malformed CGI parameter, enabling a remote attacker to cause a denial of service (device reboot). The vulnerability affects the HTTP CGI handling and...

CVE-2006-3368

Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

CVE-2006-3368

CVE-2006-3368 affects Efone 20000723. The issue arises because config.inc is stored under the web document root with insufficient access control, enabling remote attackers to obtain sensitive information (information disclosure). Public references (NVD, CVE lists) corroborate the description; no ...

CVE-2005-3368

The CVE-2005-3368 entry describes a Cross-site scripting (XSS) vulnerability in the PHP-Nuke 7.9 Search_Enhanced module. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter, potentially affecting user sessions or displayed content. Affected product: PH...