Lucene search
K

2814 matches found

NVD
NVD
added 2003/09/17 4:0 a.m.10 views

CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

5CVSS5.9AI score0.00497EPSS
Exploits0References1
NVD
NVD
added 2003/09/17 4:0 a.m.8 views

CVE-2003-0763

Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...

4.3CVSS5.7AI score0.00403EPSS
Exploits0References1
Cvelist
Cvelist
added 2003/09/12 4:0 a.m.11 views

CVE-2003-0763

Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...

5.7AI score0.00403EPSS
Exploits0References1
CVE
CVE
added 2003/09/12 4:0 a.m.39 views

CVE-2003-0764

The CVE-2003-0764 entry concerns the Escapade Scripting Engine (ESP). Affected: ESP; Issue: remote attackers can obtain sensitive path information through a malformed request that causes the server to leak the path in an error message, demonstrated via the PAGE parameter. Impact: partial disclosu...

5CVSS6.3AI score0.00497EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2003/09/12 4:0 a.m.44 views

CVE-2003-0763

CVE-2003-0763 describes a Cross-site scripting (XSS) vulnerability in the Escapade Scripting Engine (ESP). The issue arises from unsanitized input in the method parameter (demonstrated via the PAGE parameter), enabling remote attackers to inject arbitrary script. Documents indicate the affected c...

4.3CVSS5.9AI score0.00403EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2003/09/12 4:0 a.m.13 views

CVE-2003-0764

Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...

5.9AI score0.00497EPSS
Exploits0References1
securityvulns
securityvulns
added 2003/09/09 12:0 a.m.29 views

Escapade Scripting Engine XSS Vulnerability and Path Disclosure

Escapade Scripting Engine XSS Vulnerability and Path Disclosure Published: 9 September 2003 Released: 9 September 2003 Affected Systems: Escapade Scripting Engine Vendor: http://www.escapade.org , http://www.squishedmosquito.com Issue: Remote attackers can inject XSS script and know the path of t...

Exploits0
exploitpack
exploitpack
added 2003/09/09 12:0 a.m.10 views

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure

Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value fo...

Exploits0
CVE
CVE
added 2002/03/09 5:0 a.m.47 views

CVE-1999-1093

The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...

5.1CVSS7.8AI score0.06267EPSS
Exploits0References3Affected Software1
securityvulns
securityvulns
added 2002/01/04 12:0 a.m.27 views

[AP] awhttpd v2.2 local DoS

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 01/03/2002 homepage: http://sec.angrypacket.com...

6.5AI score
Exploits0
securityvulns
securityvulns
added 2002/01/04 12:0 a.m.58 views

[AP] awhttpd v2.2 local DoS

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 01/03/2002 homepage: http://sec.angrypacket.com...

6.5AI score
Exploits0
exploitpack
exploitpack
added 2000/08/14 12:0 a.m.11 views

Microsoft IIS 5.0 - Translate: f Source Disclosure (2)

Microsoft IIS 5.0 - Translate: f Source Disclosure 2 source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2000/08/14 12:0 a.m.22 views

Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)

source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...

7.4AI score
Exploits0
Microsoft KB
Microsoft KB
added 1970/01/01 12:0 a.m.3 views

Internet Explorer help

None None...

5.8AI score
Exploits0
Rows per page
Query Builder