Nokia Electronic Documentation 5.0 - Path Disclosure

source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a NED page. Exploitation will also have the side-effect...

Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Cross-Site Scripting

source: https://www.securityfocus.com/bid/8573/info A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values. An attacker could exploit this issue to execute arbitrary HTML code in the browser of a...

Escapade Scripting Engine XSS Vulnerability and Path Disclosure

Escapade Scripting Engine XSS Vulnerability and Path Disclosure Published: 9 September 2003 Released: 9 September 2003 Affected Systems: Escapade Scripting Engine Vendor: http://www.escapade.org , http://www.squishedmosquito.com Issue: Remote attackers can inject XSS script and know the path of t...

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value fo...

Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting

Escapade 0.2.1 Beta Scripting Engine - PAGE Cross-Site Scripting source: https://www.securityfocus.com/bid/8573/info A cross-site scripting vulnerability has been reported for Escapade. The vulnerability exists due to insufficient sanitization of some user-supplied values. An attacker could explo...

Escapade 0.2.1 Beta Scripting Engine - 'PAGE' Full Path Disclosure

source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value for the PAGE parameter to the Escapade Scripting Engine...

Kukol E.V. HTTP & FTP Server Suite

=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: Kukol E.V. HTTP & FTP Server Suite product: HTTP & FTP Server v6.2 by Kukol E.V. vendor: [email protected] download: hmm.. somewhere on download.ru.. risk: high date: 09/07/2k3 discovered by: euronymous /F0KP advisory urls:...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue...

FloosieTek FTGatePro 1.22 - Mail Server Full Path Disclosure

source: https://www.securityfocus.com/bid/8527/info FloosieTek FTGatePro Mail Server may disclose its installation path to remote attackers. This information could be useful when mounting further attacks against the system. This issue exists in the web administrative interface, which listens on...

SAP Internet Transaction Server

To the List, ============================================================ SEC-CONSULT Security REPORT SAP Internet Transcaction Server ======================OOOOOOOOOOOO========================== Product: ITS ITS, Version 4620.2.0.323011, Build 46B.323011 win32/IIS 5.0 Vulnerablities: -...

[SCSA-020] Multiple vulnerabilities in AttilaPHP

====================================================================== Security Corporation Security Advisory SCSA-020 Multiple vulnerabilities in AttilaPHP ====================================================================== PROGRAM: AttilaPHP HOMEPAGE: http://www.attila-php.net VULNERABLE...

ZH2003-23SA (security advisory): HostAdmin Path Disclosure

ZH2003-23SA security advisory: HostAdmin Path Disclosure Published: 12 august 2003 Released: 12 august 2003 Name: HostAdmin Affected Systems: current version Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://dreamcost.com/?page=hostadmin Description...

ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak

ZH2003-20SA security advisory: Stellar Docs Path Disclosure and Security Leak Published: 10 august 2003 Released: 10 august 2003 Name: Stellar Docs Affected Systems: v1.2 Issue: Remote attackers can know the path of the site and access the administrative section Author: [email protected] Vendor:...

SurgeLDAP 1.0 d - Full Path Disclosure

SurgeLDAP 1.0 d - Full Path Disclosure source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server...

SurgeLDAP 1.0 d - Full Path Disclosure

source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server component of SurgeLDAP...

ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure

ZH2003-22SA security advisory: Zorum XSS Vulnerability and Path Disclosure Published: 11 august 2003 Released: 11 august 2003 Name: Zorum Affected Systems: v.3.4 Issue: Remote attackers can inject XSS script and know the path of the site. Author: G00db0y zone-h org Vendor:...

HostAdmin - Full Path Disclosure

HostAdmin - Full Path Disclosure source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information...

ZH2003-18SA (security advisory): News Wizard Path Disclosure

ZH2003-18SA security advisory: News Wizard Path Disclosure Published: 10 august 2003 Released: 10 august 2003 Name: News Wizard Affected Systems: 2.0 Issue: Remote attackers can know the path of the site Author: G00db0y zone-h org Vendor: http://www.imediasoftware.com/products/newswizard/...

ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure

phpWebSite SQL Injection & DoS & XSS Vulnerabilities ------ PRODUCT: phpWebSite VENDOR: Appalachian State University VULNERABLE VERSIONS: - 0.9.x - 0.8.x - 0.7.x - And older versions. NO VULNERABLE VERSIONS - ? --------------------- Description: phpWebSite provides a complete web site content...

ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak

ZH2003-20SA security advisory: Stellar Docs Path Disclosure and Security Leak Published: 10 august 2003 Released: 10 august 2003 Name: Stellar Docs Affected Systems: v1.2 Issue: Remote attackers can know the path of the site and access the administrative section Author: G00db0y zone-h org Vendor:...