2902 matches found
WebWeaver DoS
Request via FTP to non-existant file causes server to hang...
EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities
EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/7349/info Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. Thi...
CVE-2002-0381
The TCP implementation in various BSD operating systems tcpinput.c does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address...
Justice Guestbook 1.3 Multiple Vulnerabilities
The remote host is running Justice Guestbook. This set of CGI has two vulnerabilities : - It is vulnerable to cross-site scripting attacks in jgb.php3. - If the user requests the file cfooter.php3, he will obtain the physical path of the remote CGI. An attacker may use these flaws to steal the...
CVE-2003-0131
...
WF-Chat
Product : WF-Chat Version : 1.0 Beta WebSite : http://jid.2yd.ru Problem : Viewing users account. Description: ------------ For own a admin accsess in this chat u'r needing view files: Inicks.txt !pwds.txt In short, all informations about registered users be at this files And access for reading...
dbtools weak encryption
Account for database connection is stored in .mdb file...
CVE-2003-0063
...
CVE-2003-0078
...
HTTP Proxy Open gopher:// Request Relaying
Gopher is an old network protocol which predates HTTP and is nearly unused today. As a result, gopher-compatible software is generally less audited and more likely to contain security bugs than others. By making gopher requests, an attacker may evade your firewall settings, by making connections ...
nCipher Advisory #7: Unexpected copies of imported software keys
nCipher Security Advisory No. 7 Unexpected duplicates of imported software based keys ----------------------------------------------------- SUMMARY ------- When either the command line utility generatekey or the KeySafe graphical application is used to import a software based key into an nCipher...
Multiple terminal emulators problems
By inserting secape sequences into terminal session via log files, e-mail, etc it's possible to force client into performing a set of operation, like sending control command to server, create a file, etc...
Telindus weak password encryption
During configuration trnsmition password is sent on wire in weak encryption...
PHP CGI unauthorized access
--enable-force-cgi-redirect option doesn't work. It allows remote file access and custom PHP code execution...
eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting
eCommerce Corporation Online Store Kit 3.0 - More.php Cross-Site Scripting source: https://www.securityfocus.com/bid/9676/info Multiple vulnerabilities have been identified in the software due to improper sanitization of user-supplied input. Successful exploitation of these issues could allow an...
CVE-2003-0015
...
Apache Tomcat Default Accounts
This host appears to be the running the Apache Tomcat Servlet engine with the default accounts still configured. A potential intruder could reconfigure this service in a way that grants system access. %NASLMINLEVEL 70300 This script was written by Orlando Padilla See the Nessus Scripts License fo...
CVE-2003-0014
...
[INetCop Security Advisory] Remote format string vulnerability in Tanne.
======================================== INetCop Security Advisory 2003-0x82-012 ======================================== Title: Remote format string vulnerability in Tanne. 0x01. Description About: tanne is a small, secure session-management solution for HTTP. It replaces common sessions with a...