Mongoose Web Server 2.8 - Multiple Directory Traversals

Mongoose Web Server 2.8 - Multiple Directory Traversals Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server...

Mongoose 2.8 Directory Traversal

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server. This is the latest version of the application available...

Mongoose Web Server 2.8 - Multiple Directory Traversals

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits Found By: DrIDE Date: Apr. 20, 2010 Tested On: Windows 7 Download: http://code.google.com/p/mongoose/downloads/list - Description - Mongoose v2.8 is a Windows based HTTP server. This is the latest version of the application available...

Mongoose version 2.8 source disclosure vulnerability

Exploit for unknown platform in category web applications ==================================================== Mongoose version 2.8 source disclosure vulnerability ==================================================== Application Info: Name: mongoose Version: 2.8 Download:...

mongoose Space Character Remote File Disclosure Vulnerability

Securitylab.ir Application Info: Name: mongoose Version: 2.8 Download: http://code.google.com/p/mongoose/downloads/list Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php202020 Discoverd By: Pouya Daneshmand Website: http://securitylab.ir...

[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Mongoose 2.8 - Space String Remote File Disclosure

Mongoose 2.8 - Space String Remote File Disclosure source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of file...

Mongoose 2.8 - Space String Remote File Disclosure

source: https://www.securityfocus.com/bid/38145/info Mongoose is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may a...

Core Security Technologies Advisory 2010.0121

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers 1. Advisory Information Title: Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Serve...

Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers

Advisory ID Internal CORE-2010-0121 1. Advisory Information Advisory Id: CORE-2010-0121 Advisory URL:https://www.coresecurity.com/core-labs/advisories/filename-pseudonyms-vulnerabilities Date published: 2010-02-05 Date of last update: 2010-02-05 Vendors contacted: Cherokee team, Nginx team,...

Mongoose Web Server Source Code Disclosure Vulnerability

The host is running Mongoose Web Server and is prone to Source Code Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmongooseserverinfodiscvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Mongoose Web Server Source Code Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright c...

Mongoose Web Server <= 2.8 Source Code Disclosure Vulnerability

Mongoose Web Server is prone to a source code disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Code injection

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4530

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4535

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

Code injection

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

CVE-2009-4530

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending ::$DATA to the URI...

CVE-2009-4535

Mongoose 2.8.0 and earlier allows remote attackers to obtain the source code for a web page by appending a / slash character to the URI...

CVE-2009-4530

CVE-2009-4530 affects Mongoose Web Server (2.8.0 and earlier). Vulnerability: remote disclosure of page source by appending ::$DATA to the URI, enabling partial confidentiality impact. Core cause is a web server source code disclosure path handling flaw. No explicit exploitation details or in-the...

CVE-2009-4535

The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...