91 matches found
PT-2017-5081
Name of the Vulnerable Software and Affected Versions: Umbraco version 4.7.0 Description: The issue allows remote attackers to proxy requests on their behalf. This is achieved via the url parameter in the FeedProxy.aspx script. Recommendations: For Umbraco version 4.7.0, consider restricting acce...
CVE-2016-0362
IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery SSRF attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service...
Mozilla Foundation Security Advisory 2009-27
Mozilla Foundation Security Advisory 2009-27 Title: SSL tampering via non-200 responses to proxy CONNECT requests Impact: High Announced: June 11, 2009 Reporter: Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird 2.0.0.22...
PEAR::MDB2 information leak
Under some conditions it's possible to proxy requests to different objects, including local files...
CVE-2006-6422
Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; th...
CVE-2006-6422
Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; th...
CVE-2006-6422
The CVE concerns Agileco AgileBill 1.4.x and AgileVoice 1.4.x failing to properly handle certain proxy requests. This allows remote attackers to disable the application by submitting invalid license data via a form, potentially involving modules/core/license.inc.php. Affected components appear to...
CVE-2003-1286
The CVE-2003-1286 issue affects Sambar Server prior to 6.0 beta 6. An HTTP Proxy vulnerability arises when security.ini lacks a 127.0.0.1 proxydeny entry, allowing remote attackers to send proxy HTTP requests to the server’s administrative interface and external web servers by issuing a Connectio...
Proxy Accepts gopher:// Protocol Requests
Binary data 1590.prm...
CVE-2003-1286
HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests...
BEA Weblogic server proxy library vulnerabilities
CORE SDI http://www.core-sdi.com Vulnerability Report For BEA Weblogic's Proxy Date Published: August 15, 2000 Advisory ID: CORE-081300 Bugtraq ID: 1570 CVE CAN: None currently assigned. Title: BEA Weblogic Multiple Buffer Overflow Vulnerabilities Class: Boundary Error Condition Buffer Overflow...