Dansie Shopping Cart - Server Error Message Installation Full Path Disclosure

Dansie Shopping Cart - Server Error Message Installation Full Path Disclosure source: https://www.securityfocus.com/bid/8860/info Dansie Shopping Cart is reported to be prone to path disclosre issue in the 'db' parameter of 'cart.pl' that may lead to an attacker gaining sensitive information abou...

Hummingbird CyberDOCS error page discloses web server installation path

Overview Hummingbird CyberDOCS contains a vulnerability that could allow a remote attacker to learn the installation path of the web server. This information could be used to support further attacks. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document management...

EORF2003-04: sbox path disclosure problem

--------------------------- EightOne Research Facility --------------------------- EORF2003-04 security advisory Title: sbox has a information disclosure problems Author: Julio "e2fsck" Cesar Vendor: http://stein.cshl.org/WWW/software/sbox Versions: sbox 1.04 and later Date: 18 Sep 2003 1...

SBox 1.0.4 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8705/info sbox has been reported prone to a path disclosure vulnerability. The issue has been reported to present itself when a HTTP request is made for a CGI resource that does not exist. sbox will reportedly return an error message that contains path...

SBox 1.0.4 - Full Path Disclosure

SBox 1.0.4 - Full Path Disclosure source: https://www.securityfocus.com/bid/8705/info sbox has been reported prone to a path disclosure vulnerability. The issue has been reported to present itself when a HTTP request is made for a CGI resource that does not exist. sbox will reportedly return an...

CVE-2003-0802

Summary (CVE-2003-0802): Nokia Electronic Documentation (NED) 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root and the NED server’s physical path by sending a "retrieve" action with a location parameter of ".". The connected documents reiterate the same descripti...

Multiple Nokia Electronic Documentation bugs

Crossite scripting, path disclosure, open proxy...

Nokia Electronic Documentation 5.0 - Path Disclosure

Nokia Electronic Documentation 5.0 - Path Disclosure source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a...

Nokia Electronic Documentation 5.0 - Path Disclosure

source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a NED page. Exploitation will also have the side-effect...

Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8573/info A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values. An attacker could exploit this issue to execute arbitrary HTML code in the browser of a...

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value fo...

Escapade Scripting Engine XSS Vulnerability and Path Disclosure

Escapade Scripting Engine XSS Vulnerability and Path Disclosure Published: 9 September 2003 Released: 9 September 2003 Affected Systems: Escapade Scripting Engine Vendor: http://www.escapade.org , http://www.squishedmosquito.com Issue: Remote attackers can inject XSS script and know the path of t...

Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting

Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting source: https://www.securityfocus.com/bid/8573/info A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values. An attacker could explo...

Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure

source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value for the PAGE parameter to the Escapade Scripting Engine...

Kukol E.V. HTTP & FTP Server Suite

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Kukol E.V. HTTP & FTP Server Suite product: HTTP & FTP Server v6.2 by Kukol E.V. vendor: [email protected] download: hmm.. somewhere on download.ru.. risk: high date: 09/07/2k3 discovered by: euronymous /F0KP advisory urls:...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

SAP Internet Transaction Server

To the List, ============================================================ SEC-CONSULT Security REPORT SAP Internet Transcaction Server ======================OOOOOOOOOOOO========================== Product: ITS ITS, Version 4620.2.0.323011, Build 46B.323011 win32/IIS 5.0 Vulnerablities: -...

[SCSA-020] Multiple vulnerabilities in AttilaPHP

====================================================================== Security Corporation Security Advisory SCSA-020 Multiple vulnerabilities in AttilaPHP ====================================================================== PROGRAM: AttilaPHP HOMEPAGE: http://www.attila-php.net VULNERABLE...

ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak

ZH2003-20SA security advisory: Stellar Docs Path Disclosure and Security Leak Published: 10 august 2003 Released: 10 august 2003 Name: Stellar Docs Affected Systems: v1.2 Issue: Remote attackers can know the path of the site and access the administrative section Author: [email protected] Vendor:...