Microsoft Indexing Service Query Validation Cross-Site Scripting Vulnerability

Description Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other users. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Microsoft Security Bulletin MS06-053 Vulnerability in Indexing Service Could Allow Cross-Site Scripting (920685)

Microsoft Security Bulletin MS06-053 Vulnerability in Indexing Service Could Allow Cross-Site Scripting 920685 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Information Disclosure Maximum Severity...

Microsoft Indexing Service - Query Validation Cross-Site Scripting

Microsoft Indexing Service - Query Validation Cross-Site Scripting source: https://www.securityfocus.com/bid/19927/info Microsoft Indexing Service is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input before it is rendered to other...

linkscaffe30.txt

Gonafish.com LinksCaffe 3.0 is free link indexing directory, we found that the file admin1953.php can be accessed directly to get full administration rights without password and username. Proof of exploit: http://www.example.com/pathtolinksCaffe/Admin/admin1953.php Or the images of mirror...

beagle file indexing tool code execution

No description provided...

CVE-2006-1865

Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing...

CVE-2006-1865

Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing...

PT-2006-2849 · Beagle · Beagle

Name of the Vulnerable Software and Affected Versions: Beagle versions prior to 0.2.5 Description: The issue allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing. This is due to an...

DocMGR <= 0.54.2 arbitrary remote inclusion

--------------- DocMGR = 0.54.2 arbitrary remote inclusion -------------------- software: site: http://www.docmgr.org/ description: "DocMGR is a complete, web-based Document Management System DMS. It allows for the storage of any file type, and supports full-text indexing of the most popular...

Webglimpse XSS vuln.

Webglimpse XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/webglimpse-xss-vuln.html vendor:http://webglimpse.net/ affected version:2.14.1 and prior Product Description: Webglimpse can index and search any collection of documents you choo...

Google Search Appliance Detection

The remote host seems to be a Google Search Appliance. These appliances are used to index the files contained on an intranet and make them searchable. Make sure that this appliance can only be accessed by authorized personel or that the data it indexes is public. C Tenable Network Security, Inc...

TYPO3 Security Bulletin

Situations are imaginable where sensitive information gets stored in the fileadmin/temp/ directory. If misconfigured in your web server, this directory can be browsable and therefore expose that information. Component Type: Core Affected Components: File Editor in Install Tool Versions: TYPO3 3.8...

Multiple Hyper Estraier vulnerabilities

DoS on indexing files with special Unicode characters in the names. Files from non-searchable directories are indexed...

CVE-2003-1138

The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash //...

Microsoft Windows Indexing Service fails to properly handle query validation

Overview A vulnerability in the Microsoft Indexing Service could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Indexing Service provides applications and scripts with a means of managing, querying, and indexing information in file systems or web...

CVE-2004-0897

The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack...

CVE-2004-0897

CVE-2004-0897 covers a remote code execution vulnerability in the Microsoft Windows Indexing Service (Indexing Service) on Windows XP and Windows Server 2003. The issue arises from an unchecked/lenient handling of query input leading to a buffer overflow, enabling an attacker to execute arbitrary...

Microsoft Security Bulletin MS05-003 Vulnerability in the Indexing Service Could Allow Remote Code Execution (871250)

Microsoft Security Bulletin MS05-003 Vulnerability in the Indexing Service Could Allow Remote Code Execution 871250 Issued: January 11, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...

Microsoft Indexing Service buffer overflow

Buffer overflow on search request processing...

CVE-2004-0897

The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack...