MS05-037: Vulnerability in JView Profiler Could Allow Code Execution (903235)

The remote host contains a version of the JView Profiler module that is vulnerable to a security flaw that may allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit this web page. C Tenable Network Security, Inc...

CVE-2005-1207

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...

Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution (896426)

Microsoft Security Bulletin MS05-028 Vulnerability in Web Client Service Could Allow Remote Code Execution 896426 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity Rating:...

Microsoft Windows Web Client service (WebDav client) buffer overflow

Buffer overflow on client request parsing...

CVE-2005-1207: Undefined Security Weakness

Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters...

MS05-025: Cumulative Security Update for Internet Explorer (883939)

The remote host is missing IE Cumulative Security Update 883939. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18490;...

BitTorrent Web Client Detection

Binary data 2872.prm...

logicsBS2000.txt

Logics Software Filetransfer from BS2000 Host to Web Client Release Date: April 4, 2005 Date noticed: March 11, 2005 Severity: High verified read access to any file and to-be-verified write access Vendor: Logics Sofware http://www.logics.de http://www.logics.de/bs2000.htm Systems Affected: All...

CVE-2004-0533

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client...

CVE-2004-0533: Undefined Security Weakness

Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client...

Two Vulnerabilities in OpenWFE Web Client

--------------------------------------------------------------------------- Two Vulnerabilities in OpenWFE --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...

Zeus Web Server 4.x - Admin Interface 'VS_Diag.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to construct a malicious link which...

CVE-2002-0738: Undefined Security Weakness

MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by 1 splitting the SCRIPT tag into smaller pieces, 2 including the script in a SRC argument to an IMG tag, or 3 using "&=script" syntax...

MS02-060: Flaw in WinXP Help center could enable file deletion (328940)

There is a security vulnerability in the remote Windows XP Help and Support Center which can be exploited by an attacker to delete arbitrary files on this host. To do so, an attacker needs to create malicious web pages that must be visited by the owner of the remote system. C Tenable Network...

Sage 1.0 Beta 3 - Content Management System Cross-Site Scripting

Sage 1.0 Beta 3 - Content Management System Cross-Site Scripting source: https://www.securityfocus.com/bid/6894/info Sage is prone to a cross site scripting vulnerability. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a...

FTLS Guestbook 1.1 - Script Injection

source: https://www.securityfocus.com/bid/6686/info Guestbook does not adequately filter HTML tags from various fields. This may enable an attacker to inject arbitrary script code into pages that are generated by the guestbook. The attacker's script code may be executed in the web client of...

Geeklog 1.3.7 - comment.php?cid Cross-Site Scripting

Geeklog 1.3.7 - comment.php?cid Cross-Site Scripting source: https://www.securityfocus.com/bid/6603/info Geeklog is prone to a cross-site scripting vulnerability in the 'comment.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an...

Geeklog 1.3.7 - 'comment.php?cid' Cross-Site Scripting

source: https://www.securityfocus.com/bid/6603/info Geeklog is prone to a cross-site scripting vulnerability in the 'comment.php' script. This issue is due to insufficient sanitization of input submitted in URI parameters. As a result, an attacker may create a malicious link to a site hosting...

Apache 1.3/2.0.x - Server Side Include Cross-Site Scripting

source: https://www.securityfocus.com/bid/5847/info Apache is reported to be vulnerable to cross site scripting attacks. This vulnerability is due to the SSI error pages of the webserver not being properly sanitized of malicious HTML code. Attacker-supplied HTML and script code may be executed on...