3421 matches found
CVE-2005-1230
Yawcam 0.2.5 is vulnerable to a directory traversal flaw in the web server, allowing remote attackers to read files outside the web root via ..\ sequences in a GET request. Affected: Yawcam web server; root cause: improper handling of path traversal. Impact: potential disclosure of arbitrary file...
CVE-2001-1465
CVE-2001-1465 affects SurfControl SuperScout. The issue is in the packet-filtering logic that only filters packets containing both an HTTP GET request and a Host header; an attacker can bypass filtering by fragmenting traffic so that no single packet contains both elements. This is a local-access...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...
WheresJames Webcam Publisher buffer overflow
Buffer overflow on oversize GET request...
PMSoftware Simple Web Server buffer overflow
Buffer overflow on oversized GET request...
CVE-2005-1173
Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request...
sonicwallXSS.txt
SonicWALL SOHO/10 - XSS and Code Injection vulnerability ======================================================== Product: ======== SonicWall SOHO/10 is the 2nd generation Internet Security Appliance from Sonicwall, with firewall-, vpn-, contentfiltering- and other capabilities. Vulnerability:...
CVE-2005-1122
Format string vulnerability in cgi.c for Monkey daemon monkeyd before 0.9.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP GET request containing double-encoded format string specifiers aka "double expansion error"...
Logics Software LOG-FT - Arbitrary File Disclosure
Logics Software LOG-FT - Arbitrary File Disclosure source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is...
Logics Software LOG-FT - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/12998/info LOG-FT is reported prone to an arbitrary file disclosure vulnerability. This issue results from an access validation error and can allow a remote attacker to disclose sensitive data. It is reported that an attacker can simply issue a specially...
profitcode software payprocart 3.0 - Directory Traversal
source: https://www.securityfocus.com/bid/13006/info ProfitCode Software PayProCart may allow a remote attacker to carry out directory traversal attacks. It is reported that this issue can be exploited by issuing a specially crafted HTTP GET request and supplying directory traversal sequences...
LimeWire Gnutella peer-to-peer network agent directory traversal
Directory traversal and absolute path during GET request profcessing...
LimeWire 4.1.2 - 4.5.6 Inappropriate Get Request Remote Exploit
No description provided by source. !/usr/bin/perl Limewire 4.1.2 - 4.5.6 remote and fucking lame exploit written by lammat http://grpower.ath.cx [email protected] Discovered by Kevin Walsh use IO::Socket; $host = @ARGV0; $file = @ARGV1; unless @ARGV == 2 print "usage: $0 host file\n"; print "E.g: ...
Newsscript - Access Validation
Newsscript - Access Validation source: https://www.securityfocus.com/bid/12761/info NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages. It is reported that an attacker can exploit this issue by issui...
Newsscript - Access Validation
source: https://www.securityfocus.com/bid/12761/info NewsScript is reported prone to an access validation vulnerability. This issue may allow an unauthorized attacker to add, modify and delete messages. It is reported that an attacker can exploit this issue by issuing a specially crafted HTTP GET...
Computalynx CProxy 3.3/3.4.x - Directory Traversal
source: https://www.securityfocus.com/bid/12722/info CProxy is reported prone to a remote directory traversal vulnerability. This issue arises due to insufficient sanitization of user-supplied data. A remote user may exploit this issue to disclose arbitrary files and carry out a denial of service...
CVE-2005-0622
RaidenHTTPD 1.1.32, and possibly other versions before 1.1.34, allows remote attackers to view the PHP source code via an HTTP GET request for a filename with a trailing 1 . dot or 2 space...
CVE-2005-0622
RaidenHTTPD 1.1.32 (and possibly earlier than 1.1.34) is affected by CVE-2005-0622. The issue allows remote attackers to view the PHP source code by issuing an HTTP GET for a filename that ends with a trailing dot or a trailing space. The vulnerability impacts confidentiality (partial) and is exp...
