mod_jk sends decoded URL to tomcat

modjk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the URL to Tomcat, which allows remote attackers to access protected pages via a crafted prefix JkMount, possibly involving double-encoded .. dot dot sequences and...

Unfixed XSS vulnerability at www.scherenprofi.de

Security researcher kInGoFcHaOs, has submitted on 24/06/2008 a cross-site-scripting XSS vulnerability affecting www.scherenprofi.de, which at the time of submission ranked 10867667 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It ...

Unfixed XSS vulnerability at www.senfepooshak.ir

Security researcher Dr.nsn or NSNhaCkEr, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.senfepooshak.ir, which at the time of submission ranked 1954625 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.tentonhammer.com

Security researcher xylitol, has submitted on 21/06/2008 a cross-site-scripting XSS vulnerability affecting www.tentonhammer.com, which at the time of submission ranked 6046 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2008. It is...

Unfixed XSS vulnerability at www.sukruoglu.com.tr

Security researcher bycasper41, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting www.sukruoglu.com.tr, which at the time of submission ranked 7739590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It i...

Unfixed XSS vulnerability at www.metroradio.co.uk

Security researcher Milisx, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.metroradio.co.uk, which at the time of submission ranked 455982 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is...

Unfixed XSS vulnerability at www.yorkapartmentlocators.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.yorkapartmentlocators.com, which at the time of submission ranked 2143211 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. I...

Unfixed XSS vulnerability at search.ice.com

Security researcher mckt, has submitted on 06/08/2008 a cross-site-scripting XSS vulnerability affecting search.ice.com, which at the time of submission ranked 28462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It is currently...

Unfixed XSS vulnerability at www.gameland.lt

Security researcher F3nix, has submitted on 06/03/2008 a cross-site-scripting XSS vulnerability affecting www.gameland.lt, which at the time of submission ranked 270262 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is currently...

Phpwind所有版本管理权限泄露漏洞利用poc

No description provided by source. -- coding: gb2312 -- import urllib2,httplib,sys httplib.HTTPConnection.debuglevel = 1 cookies = urllib2.HTTPCookieProcessor opener = urllib2.buildopenercookies def banner: print "" print "" print "Phpwind所有版本管理权限泄露漏洞利用poc"...

Unfixed XSS vulnerability at billdouglas.ex.ac.uk

Security researcher CCC, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting billdouglas.ex.ac.uk, which at the time of submission ranked 26741 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is current...

Unfixed XSS vulnerability at dictionnaire.sensagent.com

Security researcher Zeryus, has submitted on 31/05/2008 a cross-site-scripting XSS vulnerability affecting dictionnaire.sensagent.com, which at the time of submission ranked 22686 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It i...

Unfixed XSS vulnerability at sabo.seatadvisor.com

Security researcher Azat Harutyunyan, has submitted on 27/05/2008 a cross-site-scripting XSS vulnerability affecting sabo.seatadvisor.com, which at the time of submission ranked 180696 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008...

Unfixed XSS vulnerability at www.culvercity.org

Security researcher xylitol, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.culvercity.org, which at the time of submission ranked 439394 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is...

Unfixed XSS vulnerability at www.bma.com.af

Security researcher ariarat, has submitted on 23/05/2008 a cross-site-scripting XSS vulnerability affecting www.bma.com.af, which at the time of submission ranked 15099843 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is...

Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting

Overview Fulltext search CGI from futomi's CGI Cafe contains a cross-site scripting vulnerability. Fulltext search CGI, website search software from futomi's CGI Cafe, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution...

JP1/Cm2/Network Node Manager vulnerable to cross-site scripting

Overview Hitachi JP1/Cm2/Network Node Manager NNM is vulnerable to cross-site scripting. Hitachi JP1/Cm2/Network Node Manager NNM is software that helps a network administrator manage network configurations, faults, and other elements. Hitachi NNM is vulnerable to cross-site scripting. Impact An...

Unfixed XSS vulnerability at skylinesoaring.org

Security researcher k1ll3rnull, has submitted on 18/05/2008 a cross-site-scripting XSS vulnerability affecting skylinesoaring.org, which at the time of submission ranked 5389167 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/05/2008. It is...

Unfixed XSS vulnerability at greatriversnetwork.org

Security researcher skathgh420, has submitted on 05/10/2008 a cross-site-scripting XSS vulnerability affecting greatriversnetwork.org, which at the time of submission ranked 4009286 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/10/2008. It...

txtCMS 0.3 (index.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit =================================================== txtCMS 0.3 index.php Local File Inclusion Exploit 0day.today 2018-03-09...