3231 matches found
CVE-2003-0763: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Escapade Scripting Engine ESP allows remote attackers to inject arbitrary script via the method parameter, as demonstrated using the PAGE parameter...
CVE-2003-0764: Undefined Security Weakness
Escapade Scripting Engine ESP allows remote attackers to obtain sensitive path information via a malformed request, which leaks the information in an error message, as demonstrated using the PAGE parameter...
Escapade Scripting Engine XSS Vulnerability and Path Disclosure
Escapade Scripting Engine XSS Vulnerability and Path Disclosure Published: 9 September 2003 Released: 9 September 2003 Affected Systems: Escapade Scripting Engine Vendor: http://www.escapade.org , http://www.squishedmosquito.com Issue: Remote attackers can inject XSS script and know the path of t...
Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure
Escapade 0.2.1 Beta Scripting Engine - PAGE Full Path Disclosure source: https://www.securityfocus.com/bid/8574/info Escapade is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing a request for an invalid resource, passed as a value fo...
CVE-1999-1093
The CVE-1999-1093 entry describes a buffer overflow in the Window.External function of the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier . The flaw allows remote attackers to execute arbitrary commands via a malicious web page . Connected sources confirm the affected componen...
CVE-1999-1093: Undefined Security Weakness
Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote attackers to execute arbitrary commands via a malicious web page...
[AP] awhttpd v2.2 local DoS
-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 01/03/2002 homepage: http://sec.angrypacket.com...
[AP] awhttpd v2.2 local DoS
-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 01/03/2002 homepage: http://sec.angrypacket.com...
Microsoft IIS 5.0 - Translate: f Source Disclosure (2)
Microsoft IIS 5.0 - Translate: f Source Disclosure 2 source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them...
Microsoft IIS 5.0 - 'Translate: f' Source Disclosure (1)
source: https://www.securityfocus.com/bid/1578/info Microsoft IIS 5.0 has a dedicated scripting engine for advanced file types such as ASP, ASA, HTR, etc. files. The scripting engines handle requests for these file types, processes them accordingly, and then executes them on the server. It is...
