Xerver HTTP Server <= 4.32 Information Disclosure Vulnerability

Xerver HTTP Server is prone to a source code disclosure vulnerability. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Design/Logic Flaw

Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...

CVE-2009-3561

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...

CVE-2009-3562

Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...

CVE-2009-3544

Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...

Cross site scripting

Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...

Directory traversal

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...

CVE-2009-3544

CVE-2009-3544 affects Xerver HTTP Server 4.32. A remote attacker can disclose the source of a web page by sending a crafted HTTP request with ::$DATA appended after the filename, leading to information disclosure. Multiple sources (NVD/OpenVAS/Seebug) confirm the vulnerability and its impact as s...

CVE-2009-3562

CVE-2009-3562 affects Xerver HTTP Server 4.32. The XSS vulnerability is triggered in the management interface when action=chooseDirectory and the currentPath parameter is not properly validated, allowing remote attackers to inject arbitrary scripts/HTML. Affected product: Xerver HTTP Server (core...

CVE-2009-3562

Cross-site scripting XSS vulnerability in Xerver HTTP Server 4.32 allows remote attackers to inject arbitrary web script or HTML via the currentPath parameter in a chooseDirectory action...

CVE-2009-3561

Summary of CVE-2009-3561 : A directory traversal vulnerability in the Xerver HTTP Server (version 4.32) allows remote attackers to read arbitrary files by supplying a drive-letter path in the currentPath parameter of the chooseDirectory action. The flaw is exposed in the management interface runn...

CVE-2009-3544

Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...

CVE-2009-3561

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...

CVE-2009-3544: Exposure of Sensitive Information to an Unauthorized Actor

Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...

CVE-2009-3561: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...

Xerver 4.32 Denial Of Service

Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to a remote denia...

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability

No description provided by source. Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\ XSS Exploit :...

Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal

Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:...

Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\ XSS Exploit :...

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================ Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability ================================================================ Title: Xerver HTTP Server v4.32 XSS / Directo...