131 matches found
CVE-2006-0508
Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...
EasyCMS vulnerable to XSS injection.
The Norwegian web-publishing system EasyCMS www.easycms.no contains multiple input flaws letting users conduct successful XSS attacks. Both in the admin section, and the webpage that uses the system is vulnerable to XSS. It does not filter script tags and simple scripting like...
Allaire JRun directory browsing vulnerability
Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. Under Windows NT/2000any service pack and IIS 4.0/5.0: - JRun 3.0 all editions - JRun 3.1 all editio...
Allaire/Macromedia JRun Directory Browsing Vulnerability (MPSB01-13) - Active Check
Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. SPDX-FileCopyrightText: 2005 Felix Huber Some text descriptions might be excerpted from a referenced...
/cgi-bin directory browsable
The /cgi-bin directory is browsable. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2005 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota
Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota Website Name : ThirdLevelDomainCheck: WebUsers: hostcustid: Website Type : IP Based Domain Name Based Domain IPAddress : PortNo :IPLessDomain: td colspan="2" a...
Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota
Website Name : ThirdLevelDomainCheck: WebUsers: hostcustid: Website Type : IP Based Domain Name Based Domain IPAddress : PortNo :IPLessDomain: table width="100%" c...
CVE-2005-0336
Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...
CVE-2005-0336
CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
No description provided by source. Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004...
Hosting Controller <= 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability
Exploit for unknown platform in category remote exploits ======================================================================= Hosting Controller = 0.6.1 Hotfix 1.4 Directory Browsing Vulnerability ======================================================================= Advisory Information...
Hosting Controller 0.6.1 Hotfix 1.4 - Directory Browsing
Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based servers Vulnerable Versions : All version Tested on: v.6.1 Hotfix 1.4 Vendor Contacted : 12/5/2004 Release Date: : 12/7/2004 Summary...
CVE-2004-0335
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to 1 index.html, 2 cgi-bin/, or 3 users/...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1694.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1701.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1698.prm...
Hosting Controller Multiple Script Arbitrary Directory Browsing
Binary data 1693.prm...