MyProxy crossite scripting

Crossite scripting via URL...

Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability

Fastream NetFile FTP/WebServer 6.0 CSS Vulnerability --------------------------------------------------------------- There is a Cross-Site-Scripting Vulnerability in Fastream NetFile FTP/Webserver Version 6.0.3.588. Requesting a non existing URL will give a "404 Not Found" answer, containing the...

CVE-2002-2171

Cross-site scripting XSS vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL...

Key Focus KF Web Server 1.0.2 - Directory Contents Disclosure

source: https://www.securityfocus.com/bid/5177/info It has been reported that version 1.0.2 of KF Web Server discloses the contents of directories when a certain character is present in the URL. If a remote attacker appends the "%00" character, it will cause the web server to display the contents...

CVE-2001-0274

kicq IRC client 1.0.0, and possibly later versions, allows remote attackers to execute arbitrary commands via shell metacharacters in a URL...

Robin Twombly A1 HTTP Server 1.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2436/info It is possible for a remote user to gain read access to directories and files outside the web root. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary directory, appending the known filename will disclose t...

thinking arts es.one 1.0 - Directory Traversal

thinking arts es.one 1.0 - Directory Traversal source: https://www.securityfocus.com/bid/2385/info It is possible for a remote user to gain read access to directories and files outside the root directory of ES.One. Requesting a specially crafted URL by way of 'store.cgi', composed of '/../'...

Дыра в kicq / licq

Можно вставить шелл-код в URL...

KICQ 1.0 - Arbitrary Command Execution

KICQ 1.0 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/2443/info KICQ is an ICQ-compatible interactive messaging client for Unix. Versions of KICQ are vulnerable to remote execution of arbitrary commands embedded in URLs. A maliciously-composed URL containing shell...

Дырка в Lotus Web Server

Исопльзуя URL типа http://TARGETDOMINO/.nsf/../winnt/win.ini можно получить доступ к любому файлу на диске...

Allaire JRun 3.0 Servlet - Denial of Service

source: https://www.securityfocus.com/bid/2337/info A denial of service condition exists in the JRun web application server. Requesting multiple malformed URLs by way of the java servlet, will cause the JRun application server to stop responding. http://target/servlet/........... many "."s...

Allaire JRun 3 - Directory Disclosure

Allaire JRun 3 - Directory Disclosure source: https://www.securityfocus.com/bid/1830/info Allaire JRun is a web application development suite with JSP and Java Servlets. Each web application directory contains a WEB-INF directory, this directory contains information on web application classes,...

AnalogX SimpleServer:WWW Short GET /cgi-bin Remote DoS

The remote host is running a version of the AnalogX SimpleServer web server that is affected by a remote denial of service vulnerability. An attacker could exploit this vulnerability to crash the affected application by requesting a URL with exactly 8 characters following the '/cgi-bin/' director...

Generation Terrorists Designs Concepts Sojourn 2.0 - File Access

Generation Terrorists Designs Concepts Sojourn 2.0 - File Access source: https://www.securityfocus.com/bid/1052/info Any file that the webserver has read access to can be read on a server running the Sojourn search engine. The Sojourn software includes the ability to organize a website into...

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...