Tiny Java Web Server 1.71 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/39666/info Tiny Java Web Server is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a directory-traversal vulnerability, an open-redirection vulnerability, and a...

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

Cisco Collaboration Server 5 XSS, Source Code Disclosure

Exploit for unknown platform in category web applications ======================================================== Cisco Collaboration Server 5 XSS, Source Code Disclosure ======================================================== Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered...

Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure

Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering -- http://www.cisco.com/en/US/products/sw/custcosw/ps747/prodeolnotice09186a008032d4d0.html Replaced with:...

Mongoose Web Server Source Code Disclosure Vulnerability

The host is running Mongoose Web Server and is prone to Source Code Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmongooseserverinfodiscvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Mongoose Web Server Source Code Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

NaviCOPA Web Server Source Code Disclosure Vulnerability

NaviCOPA Web Server is prone to Source Code Disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mongoose Web Server <= 2.8 Source Code Disclosure Vulnerability

Mongoose Web Server is prone to a source code disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

NaviCOPA Web Server Source Code Disclosure Vulnerability

The host is running NaviCOPA Web Server and is prone to Source Code Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbnavicopaserverinfodiscvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ NaviCOPA Web Server Source Code Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

CVE-2009-4529

InterVations NaviCOPA Web Server 3.0.1.2 and earlier allows remote attackers to obtain the source code for a web page via a trailing encoded space character in a URI, as demonstrated by /index.html%20 and /index.php%20 URIs...

CVE-2009-4531

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a . dot character to the URI...

CVE-2009-4530

CVE-2009-4530 affects Mongoose Web Server (2.8.0 and earlier). Vulnerability: remote disclosure of page source by appending ::$DATA to the URI, enabling partial confidentiality impact. Core cause is a web server source code disclosure path handling flaw. No explicit exploitation details or in-the...

CVE-2009-4535

The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...

PT-2009-6633 · Mongoose · Mongoose

Name of the Vulnerable Software and Affected Versions: Mongoose versions 2.8.0 and earlier Description: The issue allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI. Recommendations: For versions 2.8.0 and earlier, update to a version late...

lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞

No description provided by source...

Microsoft IIS WebDAV Request Source Code Disclosure

The Internet Information Server IIS is a collection of Internet services packaged with several versions of the Windows operating system. IIS includes a Web server service that is capable of serving static, as well as dynamic content. The Web server is equipped with the Active Server Pages ASP...

CGI Generic Local File Inclusion (2nd pass)

The remote web server hosts CGI scripts that fail to adequately sanitize request strings. By leveraging this issue, an attacker may be able to include a local file and disclose its contents, or even execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Microsoft IIS ASP Scripts Source Code Disclosure (CVE-2005-2678)

The Internet Information Server IIS is a Web server packaged with several versions of the Windows operating system. The server is capable of serving static, as well as dynamic content. The server is equipped with the Active Server Pages ASP technology which is utilized for dynamic content...

SharePoint Source Code Disclosure

======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin Vendor: Microsoft Systems Affected: SharePoint 2007 12.0.0.6219, 12.0.0.4518 and possibly others Risk: Medium Status:...

SharePoint 2007 Team Services source code disclosure

Exploit for unknown platform in category web applications ==================================================== SharePoint 2007 Team Services source code disclosure ==================================================== ======= Summary ======= Name: SharePoint Team Services source code disclosure...

SharePoint 2007 Team Services source code disclosure

No description provided by source. ======= Summary ======= Name: SharePoint Team Services source code disclosure through download facility Release Date: 21 October 2009 Reference: NGS00532 Discover: Daniel Martin [email protected] Vendor: Microsoft Systems Affected: SharePoint 2007...