3409 matches found
ОБратный путь в директориях Eshare Expressions (directory traversal)
No description provided...
Viewing arbitrary file from the file system using Eshare Expressions 4 server
There is a bug in Expressions server where you can view any file on the drive that the server is installed on by using simple ../../ Example: If eshare server Is installed at: C:eshareexpressions And lets say this is an NT4.0 machine with os installed in c:winnt It is possible to pull win.ini fil...
Apache web server performs case sensitive filtering on Mac OS X HFS+ case insensitive filesystem
Overview The Apache 1.3.14 web server's file access protection scheme can be bypassed for the Mac OS X HFS+ filesystem. Description The Apache web server's file access protection scheme i.e., file request "filtering" assumes that the filesystem being protected is case sensitve. For example, in a...
CVE-2000-0115: Undefined Security Weakness
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page...
CVE-2000-0115
IIS allows local users to cause a denial of service via invalid regular expressions in a Visual Basic script in an ASP page...
Microsoft IIS 4.0 / Microsoft JET 3.5/3.5.1 Database Engine - VBA
source: https://www.securityfocus.com/bid/286/info Microsoft's JET database engine feature allows the embedding of Visual Basic for Application in SQL string expressions and the lack of metacharacter filtering by many web applications may allow remote users to execute commands on the system...
Security update 1970-01-01
...