53 matches found
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2000-0773
Summary: Bajie HTTP web server 0.30a contains a path traversal vulnerability that allows a remote attacker to read arbitrary files by using a URL containing a dot-dot sequence ("...."). The root cause is insufficient validation of path components in the HTTP request, resulting in potential partia...
CVE-2000-0773: Undefined Security Weakness
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2003-1543
Cross-site scripting XSS vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message...
Multiple vulnerability in NetServe 1.0.7
/ | For Contacts: | nimber | e-mail: [email protected] | [email protected] |Home Page: www.nimber.plux.ru |ICQ: 132614 Advisory Information: ================= Application : NetServe Web Server Date : 17.11.2003 Vendor Homepage : http://www.starlots.com/netx/index.html Versions : 1.0.7 maybe older...
Important: Red Hat Security Advisory: : : : Updated apache and mod_ssl packages available
Updated Apache and modssl packages which fix a number of security issues are now available for iSeries and pSeries systems. The Apache HTTP Web Server is a secure, efficient, and extensible web server. This erratum provides updated Apache and modssl packages for iSeries and pSeries that correct a...
Low: Red Hat Security Advisory: : Updated httpd packages fix security vulnerabilities.
Updated httpd packages which fix a number of security issues are now available for Red Hat Linux 8.0 and 9. The Apache HTTP Web Server is a secure, efficient, and extensible Web server that provides HTTP services. A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a...
CVE-2002-1009
The CVE-2002-1009 issue affects Lil’ HTTP Server (LilHTTP Web Server) via the pbcgi.cgi module. A cross-site scripting vulnerability allows remote attackers to inject and execute arbitrary web scripts in users’ browsers by supplying malicious input in the Name or E-mail parameters. This is a netw...
CVE-2002-1009: Undefined Security Weakness
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the 1 "Name" or 2 "E-mail" parameters...
CVE-2002-1008: Undefined Security Weakness
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the...
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...