657 matches found
CVE-2007-1471
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp...
Authentication flaw
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp...
CVE-2007-1471
CVE-2007-1471 affects Orion-Blog 2.0. The vulnerability allows remote attackers to bypass authentication by directly requesting admin/AdminBlogNewsEdit.asp, gaining privileges without valid credentials. No remediation details are provided in the connected documents.
CVE-2007-1471
admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a direct URL request for admin/AdminBlogNewsEdit.asp...
Orion-Blog 2.0 - Remote Authentication Bypass
Orion-Blog 2.0 - Remote Authentication Bypass Orion-Blog v2.0 Version Remote Privilege Escalation Exploit function ps unique.action=""+document.unique.site.value+"/admin/AdminBlogNewsEdit.asp"; unique.submit; --- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit --- Site Address :...
Orion-Blog 2.0 (AdminBlogNewsEdit.asp) Remote Auth Bypass Vuln
No description provided by source. !-- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit Type : Privilege Escalation Release Date : 2007-03-14 Product : Orion-Blog Bug : http://localhost/script/admin/default.asp Privilege Escalation Exploit : -- titleOrion-Blog v2.0 Version Remote...
Orion-Blog 2.0 (AdminBlogNewsEdit.asp) Remote Auth Bypass Vuln
Exploit for unknown platform in category web applications ============================================================== Orion-Blog 2.0 AdminBlogNewsEdit.asp Remote Auth Bypass Vuln ============================================================== Orion-Blog v2.0 Version Remote Privilege Escalation...
Orion-Blog 2.0 - Remote Authentication Bypass
Orion-Blog v2.0 Version Remote Privilege Escalation Exploit function ps unique.action=""+document.unique.site.value+"/admin/AdminBlogNewsEdit.asp"; unique.submit; --- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit --- Site Address : UniquE-KeyUniquE-Cracker [email protected]...
Orion Application Server Crafted Filename Extension JSP Script Source Disclosure
The remote host is running Orion Application Server, an application server running on a Java2 platform. According to its banner, the version of Orion installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue t...
CVE-2006-0816
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via 1 . dot and 2 space characters in the extension of a URL...
Design/Logic Flaw
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via 1 . dot and 2 space characters in the extension of a URL...
CVE-2006-0816
Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via 1 . dot and 2 space characters in the extension of a URL...
CVE-2006-0816
Orion Application Server before 2.0.7 on Windows is affected by a filename extension validation flaw that allows remote disclosure of JSP source code. An attacker can craft a URL with dot or space characters in the extension to reveal the contents of JSP files. The vulnerability impacts confident...
[Full-disclosure] Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability
====================================================================== Secunia Research 23/03/2006 - Orion Application Server JSP Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...
Orion application server source code disclosure
It's possible to access JSP page content by adding dot with space character to file extention...
Orion < 2.0.7 Crafted Filename Extension Source Code Disclosure
Binary data 3486.prm...
httpXSS.txt
The following web servers do not properly sanitize their output when returning a 404 resource not found error which could be used in a XSS attack: Orion 1.3.8 Orion 1.4.5 CompaqHTTPServer 2.1 PoC: http://localhost/alert'XSS' -- - Josh...
CVE-2005-2981
Cross-site scripting XSS vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting 404 error page...
CVE-2005-2981
CVE-2005-2981 describes a cross-site scripting (XSS) vulnerability in Orion versions 1.3.8 and 1.4.5 . The issue arises from user-supplied input in the URL not being properly quoted in the resulting 404 error page, enabling an attacker to inject arbitrary script/HTML. The core vulnerability is th...