314 matches found
CVE-2005-4489
Cross-site scripting XSS vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 type and 2 count parameters, and 3 the query string in a story...
Interactive Story (story.pl) < 1.4 Directory Traversal Vulnerability
Interactive Story story.pl is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2001 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2002-0385
Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' double quote and and '' characters, which causes the TCL interpreter to crash and include stack data in the output...
CVE-2002-0385
Vignette Story Server (versions 4.1 and 6.0) is affected. A flaw in the TCL interpreter when processing dynamic pages allows a remote attacker to cause the interpreter to crash and disclose stack data, effectively exposing sensitive information such as other users’ sessions and server-side code. ...
CVE-2002-0385
Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' double quote and and '' characters, which causes the TCL interpreter to crash and include stack data in the output...
CVE-2002-0385: Undefined Security Weakness
Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' double quote and and '' characters, which causes the TCL interpreter to crash and include stack data in the output...
Vignette Story Server sensitive information disclosure (a040703-1)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Vignette Story Server sensitive information disclosure Release Date: 04/07/2003 Application: Vignette Story Server v4.1, 6 Platform: Windows / Unix Severity: A remote user can extract sessi...
CVE-2001-0804
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...
CVE-2001-0804
CVE-2001-0804 affects Interactive Story prior to version 1.4, via a directory traversal in story.pl. The vulnerability allows remote attackers to read arbitrary server files by manipulating the next parameter (e.g., ..\ or ../../.. paths). Exploitation details from the Nessus plugin show requests...
CVE-2001-0804: Undefined Security Weakness
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...
CVE-2001-0804
Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. dot dot attack on the "next" parameter...
Interactive Story story.pl next Parameter Traversal Arbitrary File Access
By requesting : GET /cgi-bin/story.pl?next=../../../filetoread%00 An attacker may use this flaw to read arbitrary files on this server. %NASLMINLEVEL 70300 This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 1/13/2009 ...
QDAV-2001-7-3
Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...
Interactive Story File Disclosure Vulnerability
Interactive Story File Disclosure Vulnerability qDefense Advisory Number QDAV-2001-7-3 Product: Interactive Story Vendor: Valerie Mates http://www.valeriemates.com Severity: Remote; Attacker may read arbitrary file Versions Affected: Version 1.3 Vendor Status: Vendor contacted; has released new...