EUVD-2006-0826

Malware in sbrugna...

EUVD-2006-0825

Malware in sbrugna...

CVE-2006-0820

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

Cross site scripting

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

CVE-2006-0820

CVE-2006-0820 affects the Dwarf HTTP Server (version 1.3.2). The vulnerability group includes two issues: (1) cross-site scripting via error messages, allowing remote attackers to inject arbitrary HTML/script in users’ browsers, and (2) a filename-extension validation flaw that can disclose sourc...

CVE-2006-0820: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

Multiple Dwarf HTTP Server vulnerabilities

Crossite scripting, scripts source code disclosure...

CVE-2006-0819: Undefined Security Weakness

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via 1 dot, 2 space, 3 slash, or 4 NULL characters in the filename extension of an HTTP request...

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...