CVE-2007-3835

CVE-2007-3835 has confirmed XSS in Ex Libris MetaLib 3.13 and 4. An attacker can inject arbitrary web script/HTML via an unspecified vector related to a resource identifier that can be discovered through a search. The vulnerability is remote in scope and leverages the user’s interaction with sear...

Serendipity serendipity[charset] Parameter Local File Inclusion

Binary data 3835.prm...

CVE-2006-3835

CVE-2006-3835 affects Apache Tomcat 5 before 5.5.17. The vulnerability allows remote attackers to list directories by using a semicolon before a filename with a mapped extension, as shown by URLs like /;index.jsp or /;help.do. The initial description confirms the condition; related advisories (GH...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3835

The CVE-2005-3835 entry documents a PHP remote file inclusion vulnerability in DeskLance 2.3 and earlier, exploitable through a URL parameter (main) in support/index.php to execute arbitrary PHP code. Affected software: DeskLance (desktop/web app)

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

Fixed in Apache Tomcat 5.5.13, 5.0.SVN

Low: Directory listing CVE-2006-3835 This is expected behaviour when directory listings are enabled. The semicolon ; is the separator for path parameters so inserting one before a file name changes the request into a request for a directory with a path parameter. If directory listings are enabled...