Sun Java System Web Server ::$DATA Extension Request JSP Resource Disclosure

The remote Sun Java System Web Server or an older version, such as Sun ONE Web Server or iPlanet reveals the source code of '.jsp' files when an attacker appends '::$DATA' to the request. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39618; scriptversion"1.10";...

NameLess the back door of technical analysis full-contact-vulnerability warning-the black bar safety net

NameLess's name should be heard of it, estimated there are quite a lot of people used it, personally think that this back door is very classic, we'll simply look at about it description: there is only one DLL file, usually do not start in the mouth,can be a reverse connection back door program...

Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

CVE-2009-2301

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

CVE-2009-2301

The CVE-2009-2301 entry concerns the Radware AppWall Web Application Firewall (WAF) version 1.0.2.6 with Gateway 4.6.0.2. The vulnerability allows remote attackers to read source code by directly requesting one of three files (Management/.)(funcs.inc, defines.inc, msg.inc). The underlying issue i...

CVE-2009-2301

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

CVE-2009-2301: Improper Input Validation

The radware AppWall Web Application Firewall WAF 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to 1 funcs.inc, 2 defines.inc, or 3 msg.inc in Management/...

Design/Logic Flaw

Elvin 1.2.0 allows remote attackers to read the PHP source code of 1 login.ei, 2 jumpbug.ei, or 3 createaccount.ei in inc/ via a direct request...

CVE-2009-2130

Elvin 1.2.0 allows remote attackers to read the PHP source code of 1 login.ei, 2 jumpbug.ei, or 3 createaccount.ei in inc/ via a direct request...

CVE-2009-2130

Elvin 1.2.0 is affected by CVE-2009-2130, where remote attackers can read PHP source files (inc/login.ei, inc/jump_bug.ei, inc/create_account.ei) via direct requests. The underlying issue is a file disclosure vulnerability in Elvin 1.2.0 leading to partial confidentiality impact. Public reference...

CVE-2009-2130

Elvin 1.2.0 allows remote attackers to read the PHP source code of 1 login.ei, 2 jumpbug.ei, or 3 createaccount.ei in inc/ via a direct request...

cscope security update

CentOS Errata and Security Advisory CESA-2009:1102 An updated cscope package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cscope is a mature, ncurses-based,...

Moderate: Red Hat Security Advisory: cscope security update

An updated cscope package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple buffer...

Moderate: Red Hat Security Advisory: cscope security update

An updated cscope package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. cscope is a mature, ncurses-based, C source-code tree browsing tool. Multiple...

Elvin BTS 1.2.0 XSS / LFI / SQL Injection

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== Elvin BTS 1.2.0 Multiple Remote Vulnerabilities =============================================== + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod - Script Homepage :...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

No description provided by source. + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Loc...

elvin bts 1.2.0 - Multiple Vulnerabilities

elvin bts 1.2.0 - Multiple Vulnerabilities + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injecti...

elvin bts 1.2.0 - Multiple Vulnerabilities

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...