Apache Httpd < 1.3.27 : Error page XSS using wildcard DNS

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header...

Apache Httpd < 2.0.43 : Error page XSS using wildcard DNS

Cross-site scripting XSS vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error page...

NullLogic Null HTTPd 0.5 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5603/info NullLogic Null HTTPd is a small multithreaded webserver for Linux and Windows. It is possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. As a result, when an innocent user follows such a link,...

Mozilla Bonsai 1.3 - Full Path Disclosure

Mozilla Bonsai 1.3 - Full Path Disclosure source: https://www.securityfocus.com/bid/5517/info A path disclosure vulnerability has been reported in Mozilla Bonsai. An attacker can exploit this vulnerability by making a malformed request to Bonsai. This causes Bonsai to return an error page to the...

CVE-2002-1445

Cross-site scripting XSS vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page...

KPMG-2002032: Macromedia Sitespring Cross Site Scripting

-------------------------------------------------------------------- Title: Macromedia Sitespring Cross Site Scripting BUG-ID: 2002032 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user could use a default error page as...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in the default error page used by...

GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting

GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/5198/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible for attackers to launch cross site scripting attacks against vulnerable systems. GoAhead WebServer...

GoAhead Web Server 2.1.x - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5198/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible for attackers to launch cross site scripting attacks against vulnerable systems. GoAhead WebServer includes unsanitized requested URLs when displaying a 404...

YaBB 1 - Invalid Topic Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to...

YaBB 1 - Invalid Topic Error Page Cross-Site Scripting

YaBB 1 - Invalid Topic Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. YaBB fails to check URLs for the presence of script commands when...

IBM WebSphere Traversal Error Page XSS

The remote web server seems to be vulnerable to cross-site scripting attacks because it fails to sanitize input supplied as a filename when displaying an error page. The vulnerability would allow an attacker to make the server present the user with the attacker's JavaScript/HTML code. Since the...

ServletExec 4.1 ISAPI com.newatlanta.servletexec.JSP10Servlet Path Disclosure

By requesting a nonexistent .JSP file, or by invoking the JSPServlet directly and supplying no filename, it is possible to make the ServletExec ISAPI filter disclose the physical path of the webroot. %NASLMINLEVEL 70300 This script was written by Matt Moore Script audit and contributions from...

ACME Labs thttpd 2.20 - Cross-Site Scripting

ACME Labs thttpd 2.20 - Cross-Site Scripting source: https://www.securityfocus.com/bid/4601/info thttpd is a web server product maintained by ACME Labs. thttpd has been compiled for Linux, BSD and Solaris, as well as other Unix like operating systems. Cross Site Scripting issues has been reported...

Microsoft Internet Information Server (IIS) contains cross-site scripting vulnerability in HTTP error page results

Overview Visitors to web sites that use Microsoft IIS and also use the default error pages are vulnerable to cross-site scripting attacks. Description Cross-site scripting is a form of attack in which an intruder leverages the trust between a victim and a web-site the victim trusts. Quoting from...

Microsoft IIS 4.0/5.0 - HTTP Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user supplied input. An attacker may construct a link to a vulnerable...

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user...

Thunderstone TEXIS 3.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/4035/info A vulnerability in TEXIS allows an attacker to view the full path to the web root. If the attacker submits an HTTP request for an invalid path, the server will return an error page containing the path to the web root. System information may also...