Lucene search
+L

2470 matches found

exploitpack
exploitpack
•added 2001/08/16 12:00 a.m.•22 views

Jakarta Tomcat 3.x4.0 - Error Message Information Disclosure

Jakarta Tomcat 3.x4.0 - Error Message Information Disclosure source: https://www.securityfocus.com/bid/3199/info When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of th...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2001/08/16 12:00 a.m.•37 views

Jakarta Tomcat 3.x/4.0 - Error Message Information Disclosure

source: https://www.securityfocus.com/bid/3199/info When a malformed request is made for a Java Server Page the server displays an error page. The error page contains potentially sensitive information, along with the absolute path of the JSP file on the webserver, which may aid in further attacks...

5.8AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/06/15 12:00 a.m.•67 views

Дырки в BestCrypt (non-absolute path, buffer overflow)

При вызове внешнего приложения с повышенными привилегиями используется не абсолютный путь, Кроме того имеются переполнения буфера...

2.2AI score
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/07 12:00 a.m.•6 views

CVE-2000-0874: Undefined Security Weakness

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

5CVSS5.8AI score0.00834EPSS
SaveExploits0References1
NVD
NVD
•added 2000/12/31 5:00 a.m.•16 views

CVE-2000-1240

Unspecified vulnerability in siteman.php3 in AnyPortalphp before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

5CVSS6.2AI score0.01212EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/12/31 12:00 a.m.•7 views

CVE-2000-1240: Undefined Security Weakness

Unspecified vulnerability in siteman.php3 in AnyPortalphp before 22 APR 00 allows remote attackers to obtain sensitive information via unknown attack vectors, which reveal the absolute path. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

5CVSS5.9AI score0.01212EPSS
SaveExploits0References3
securityvulns
securityvulns
•added 2000/08/18 12:00 a.m.•27 views

Дырка в htgrep

Используя абсолютный путь можно получить доступ к любому файлу...

7.2AI score
SaveExploits0References1
CVE
CVE
•added 2000/02/04 5:00 a.m.•68 views

CVE-1999-0882

The Falcon web server is affected by CVE-1999-0882: remote attackers can determine the absolute path of the web root by exploiting long file names, revealing an information disclosure issue in path handling. Affected product: Falcon web server (exact versions not specified in the provided documen...

5CVSS7.1AI score0.01933EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/02/04 12:00 a.m.•5 views

CVE-1999-0882: Undefined Security Weakness

Falcon web server allows remote attackers to determine the absolute path of the web root via long file names...

5CVSS5.9AI score0.01933EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 1999/12/21 12:00 a.m.•49 views

IBM Lotus Domino HTTP Server Filesystem Setup Disclosure

It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

5CVSS5.5AI score0.01359EPSS
SaveExploits0References2
Rows per page
Query Builder