PHP 4.2.3 - Header Function Script Injection

PHP 4.2.3 - Header Function Script Injection source: https://www.securityfocus.com/bid/5669/info PHP is a freely available, open source web scripting language package. It is available for Microsoft Windows, Linux, and Unix operating systems. It has been reported that a vulnerability in the PHP...

Macromedia JRun 3/4 - Administrative Authentication Bypass

source: https://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a request for the administrative authentication page...

Hosting Controller 1.4 - Import Root Directory Command Execution

source: https://www.securityfocus.com/bid/4761/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The Import Root Directory improotdir.asp script does not force an authentication...

CVE-2002-0325

CVE-2002-0325 describes a directory traversal vulnerability in BadBlue prior to 1.6.1 that allows remote attackers to read arbitrary files via a modified dot-dot sequence in the URL. The vulnerability is confirmed in multiple sources (NVD and CVE listings) and is categorized with medium severity ...

CVE-2002-0160

The administration function in Cisco Secure Access Control Server ACS for Windows, 2.6.x and earlier and 3.x through 3.01 build 40, allows remote attackers to read HTML, Java class, and image files outside the web root via a .... modified .. in the URL to port 2002...

Sambar Server 5.1 - Script Source Disclosure

Sambar Server 5.1 - Script Source Disclosure source: https://www.securityfocus.com/bid/4533/info An issue has been discovered in Sambar Server, which could allow a user to reveal the source code of script files. Submitting a request for a known script file along with a space and null character %0...

Burning Board 1.1.1 - 'URL' Manipulation

source: https://www.securityfocus.com/bid/4512/info Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows. An attacker may allegedly create a malicious link which is capable of causing actions to b...

Burning Board 1.1.1 - URL Manipulation

Burning Board 1.1.1 - URL Manipulation source: https://www.securityfocus.com/bid/4512/info Burning Board is web forum software. It is written in PHP, back-ended by MySQL, and will run on most Unix and Linux variants as well as Microsoft Windows. An attacker may allegedly create a malicious link...

CVE-2002-0112

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL...

CVE-2001-1152

Baltimore Technologies WEBsweeper 4.02, when used to manage URL blacklists, allows remote attackers to bypass blacklist restrictions and connect to unauthorized web servers by modifying the requested URL, including 1 a // double slash, 2 a /SUBDIR/.. where the desired file is in the parentdir, 3 ...

CVE-2002-0112

Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL...

CVE-2001-0574

Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' dot dot in the URL...

CVE-2001-0537: Improper Authentication

HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL...

CVE-2002-1603

GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, , %2f encoded /, %20 encoded space, or %00 encoded null character, which returns the ASP source code unparsed...

Вставка скриптов в URL в Horde IMP (crossite scripting)

Вставив скрипт в URL можно получить доступ к сеансовым cookie...

Microsoft Internet Explorer 56 - Cookie DisclosureModification

Microsoft Internet Explorer 56 - Cookie DisclosureModification source: https://www.securityfocus.com/bid/3513/info Internet Explorer contains a vulnerability, which could allow an attacker to construct a URL that would display or modify the cookie information associated with an arbitrary website...

IBM AS/400 HTTP Server '/' attack

IBM's HTTP Server on the AS/400 platform is vulnerable to an attack that will show the source code of the page -- such as an .html or .jsp page -- by attaching an '/' to the end of a URL. Compare these two URL's: http://www.foo.com/getsource.jsp http://www.foo.com/getsource.jsp/ The later URL wil...

Microsoft Internet Explorer 5/6 - Cookie Disclosure/Modification

source: https://www.securityfocus.com/bid/3513/info Internet Explorer contains a vulnerability, which could allow an attacker to construct a URL that would display or modify the cookie information associated with an arbitrary website. If a URL is composed in the about: protocol referencing a...

CVE-2001-0729

Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / slash characters...

CVE-1999-1509

CVE-1999-1509 affects Etype Eserv 2.50 web server, where a directory traversal via .. in a URL allows a remote attacker to read arbitrary files on the server. This vulnerability is documented in multiple sources (NVD, CVE list, Nessus generic check) with the same root cause and impact. The connec...