176 matches found
UBUNTU-CVE-2020-25073
FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection from the Tor onion service or from PageKite is considered a local connection. This affects both the freedombox and plinth packages of some...
CVE-2019-18864
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...
Design/Logic Flaw
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...
CVE-2019-18864
CVE-2019-18864 affects Blaauw Remote Kiln Control v3.00r4. The issue is an information-disclosure vulnerability allowing an unauthenticated remote attacker to access sensitive host information via /server-info and /server-status. No explicit root cause details are provided in the documents beyond...
CVE-2019-18864
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...
CVE-2019-18864: Undefined Security Weakness
/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive information about the host machine...
How to compile a server status report by using XenCenter
This article describes how to use XenCenter to collect a server status report...
WordPress Server Status by Hostname/IP plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Server Status by Hostname/IP plugin is used in one of the server monitoring plugin. A SQL injection vulnerability exists in version 4.6...
CVE-2019-12570
A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...
CVE-2019-12570
A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...
CVE-2019-12570
The CVE-2019-12570 entry concerns the WordPress plugin “Server Status by Hostname/IP” by Xpert Solution, version 4.6. A SQL injection vulnerability exists that allows an authenticated user to execute arbitrary SQL commands via GET parameters due to insufficient input validation in database querie...
CVE-2019-12570: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters...
Server Status by Hostname/IP <= 4.6 - Authenticated SQL Injection
The last time it was checked the plugin was still affected and had been closed. PoC http://www.example.com/wp-admin/admin.php?page=all-servers=2+UNION+SELECT+1%2C2%2C3%2C%40%40version+=edit...
TomTom: Apache mod_status /server-status Information Disclosure
Description It is possible to obtain an overview of the remote Apache web server's activity and performance by requesting the URL '/server-status'. This overview includes information such as current hosts and requests being processed, the number of workers idle and service requests, and CPU...
Capital One: Apache server-status enabled
Apache /server-status displays information about your Apache status. If you are not using this feature, disable it. GET /server-status HTTP/1.1 Connection: keep-alive Accept: / Accept-Encoding: gzip,deflate Host: proxy-copp.capitalone.com User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64...
Mail.ru: сервант статус
Apache server status was available at jw-cn-test-1.ext.terrhq.ru...
Mail.ru: [info.tmgame.mail.ru] Apache Server Status
Open Apache Server Status in info.tmgame.mail.ru tmgame.mail.ru is not currently covered by Bug Bounty program...
Mail.ru: Apache Server-Status Detected
prosieben.icq.com was delegated to a partner site as a part of a partner program and this site exposes Apache server-status. An issue is related to partner host outside of ICQ control, does not affect ICQ users and was accepted outside of bug bounty scope...
How Do I Remove an Inactive or Non-existent License Server From LUI Reports
This article describes how to remove XenApp and XenDesktop license servers from the License Usage Insights LUI service that are no longer in in use. These servers appear in the Server Status page in the LUI service with a “not reporting” status. Who is affected? Citrix Service Provider partners...