Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln

Exploit for windows platform in category remote exploits ============================================================= Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln ============================================================= Xerver HTTP Server v4.32 Remote Arbitrary Source Code...

Xerver HTTP Server 4.32 Disclosure

Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...

Xerver HTTP Server 4.32 - Arbitrary Source Code Disclosure

Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...

CVE-2005-4774

Cross-site scripting XSS vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI...

CVE-2005-4774

The provided data identifies CVE-2005-4774 as a cross-site scripting (XSS) vulnerability in Xerver 4.17. The vulnerability allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI, potentially affecting users who view the modified URL. The initia...

CVE-2005-4774

Cross-site scripting XSS vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI...

Xerver DoS Vulnerability (CVE-2002-0448) - Active Check

Xerver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:xerver:xerver";...

CVE-2005-3293

Xerver 4.17 allows remote attackers to 1 obtain source code of scripts via a request with a trailing "." dot or 2 list directory contents via a trailing null character...

CVE-2005-3293

Xerver 4.17 allows remote attackers to 1 obtain source code of scripts via a request with a trailing "." dot or 2 list directory contents via a trailing null character...

CVE-2005-3293

CVE-2005-3293 affects Xerver before v4.20. Two information-disclosure vectors are described: (1) appending a trailing dot to a script URL to obtain its source code, and (2) sending a request with a trailing null character (%00) to list directory contents. Evidence from NVD/CVE records confirms vu...

Xerver < 4.20 Multiple Vulnerabilities

Binary data 3263.prm...

Xerver < 4.20 Multiple Vulnerabilities

The remote host is running a version of Xerver prior to 4.20. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that is triggered when a '.' is appended to the filename of a script in a URL. A remote attacker can exploit this to disclose the...

[SA17243] Xerver Multiple Vulnerabilities

TITLE: Xerver Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17243 VERIFY ADVISORY: http://secunia.com/advisories/17243/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: Xerver 4.x...

Xerver 4.17 Server - URI Null Character Cross-Site Scripting

Xerver 4.17 Server - URI Null Character Cross-Site Scripting source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a...

Xerver 4.17 Server - URI Null Character Cross-Site Scripting

source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...

Xerver 4.17 - Forced Directory Listing

Xerver 4.17 - Forced Directory Listing source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to...

Xerver 4.17 - Single Dot File Request Source Disclosure

Xerver 4.17 - Single Dot File Request Source Disclosure source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a...

Xerver 4.17 - Forced Directory Listing

source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...

Xerver 4.17 - Single Dot File Request Source Disclosure

source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...

CVE-2002-0448

Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service crash via an HTTP request that contains many "C:/" sequences...