Lucene search
+L

3409 matches found

securityvulns
securityvulns
•added 2002/02/05 12:00 a.m.•57 views

ОБратный путь в директориях Eshare Expressions (directory traversal)

No description provided...

2.3AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2002/02/05 12:00 a.m.•59 views

Viewing arbitrary file from the file system using Eshare Expressions 4 server

There is a bug in Expressions server where you can view any file on the drive that the server is installed on by using simple ../../ Example: If eshare server Is installed at: C:eshareexpressions And lets say this is an NT4.0 machine with os installed in c:winnt It is possible to pull win.ini fil...

2.8AI score
SaveExploits0
CERT
CERT
•added 2001/09/28 12:00 a.m.•54 views

Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem

Overview The Apache 1.3.14 web server's file access protection scheme can be bypassed for the Mac OS X HFS+ filesystem. Description The Apache web server's file access protection scheme i.e., file request "filtering" assumes that the filesystem being protected is case sensitve. For example, in a...

9.8CVSS8.8AI score0.08161EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2000/02/08 12:00 a.m.•9 views

CVE-2000-0115: Undefined Security Weakness

IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page...

5CVSS5.7AI score0.10016EPSS
SaveExploits0References1
NVD
NVD
•added 2000/01/21 5:00 a.m.•42 views

CVE-2000-0115

IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page...

5CVSS6.2AI score0.10016EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 1999/05/25 12:00 a.m.•67 views

Microsoft IIS 4.0 / Microsoft JET 3.5/3.5.1 Database Engine - VBA

source: https://www.securityfocus.com/bid/286/info Microsoft's JET database engine feature allows the embedding of Visual Basic for Application in SQL string expressions and the lack of metacharacter filtering by many web applications may allow remote users to execute commands on the system...

5.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•57 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Friends Of PHP
Friends Of PHP
•added 1970/01/01 12:00 a.m.•20 views

CVE-2026-45756: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits: ReDoS

More info at https://symfony.com/cve-2026-45756...

8.2CVSS5.8AI score0.0063EPSS
SaveExploits0Affected Software1
Friends Of PHP
Friends Of PHP
•added 1970/01/01 12:00 a.m.•18 views

CVE-2026-45756: JsonPath Evaluates Attacker-Controlled Regular Expressions in match()/search() Without Limits: ReDoS

More info at https://symfony.com/cve-2026-45756...

8.2CVSS5.8AI score0.0063EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder