45 matches found
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...
WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure
source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...
CVE-2002-0596
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...
CVE-2002-0595
Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...
CVE-2002-0596
CVE-2002-0596 affects WebTrends Reporting Center 4.0d. A remote attacker can cause an error message to disclose the server’s real path by issuing a GET to get_od_toc.pl with an empty Profile parameter, resulting in information disclosure (pathname leakage). Root cause is an error message that rev...
CVE-2002-0595
Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...
CVE-2002-0596
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...
CVE-2002-0595
The CVE-2002-0595 entry describes a buffer overflow in WebTrends Reporting Center 4.0d, specifically in WTRS_UI.EXE (WTX_REMOTE.DLL). The vulnerability can be triggered by a long HTTP GET request to the /reports/ directory, allowing remote execution of arbitrary code. Metrics indicate a Network-v...
CVE-2002-0596: Exposure of Sensitive Information to an Unauthorized Actor
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to getodtoc.pl with an empty Profile parameter, which leaks the pathname in an error message...
CVE-2002-0595: Undefined Security Weakness
Buffer overflow in WTRSUI.EXE WTXREMOTE.DLL for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory...
Buffer overflow in WebTrends Reporting Center
No description provided...
WebTrends Reporting Center
NGSSoftware Insight Security Research Advisory Name: WebTrends Reporting Center 4.0d Systems Affected: WinNT, Win2K, XP Severity: High Risk Category: Remote System Buffer Overrun Vendor URL: http://www.webtrends.com Author: Mark Litchfield [email protected] Advisory URL:...
CVE-2001-0693
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...
CVE-2001-0693
CVE-2001-0693 affects WebTrends HTTP Server 3.1c and 3.5, where a remote attacker can view script source by requesting a filename followed by an encoded space (%20). The underlying issue is an information disclosure vulnerability in the server’s handling of URL paths. The CVSS vector indicates ne...
CVE-2001-0693
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...
CVE-2001-0693: Undefined Security Weakness
WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space %20...
WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure
WebTrends Enterprise Reporting Server 3.1 c3.5 - Source Code Disclosure source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of...
WebTrends Enterprise Reporting Server 3.1 c/3.5 - Source Code Disclosure
source: https://www.securityfocus.com/bid/2812/info WebTrends Live is a web-based reporting service which provides interactive tracking of usage statistics and E-commerce revenue. It is possible to view the source code of arbitrary scripts on the WebTrends Live webserver. This is accomplished by...
CVE-1999-0916
The CVE-1999-0916 entry concerns WebTrends software that stores account names and passwords in a file with insufficient access restrictions. Connected PT-1999-1462 adds that the affected WebTrends versions are not specified and provides no fix information; it also describes the risk as exposure o...