420 matches found
CVE-2002-1785
Zeus Web Server (Zeus Administration Server) versions 4.0–4.1r2 are affected by an XSS vulnerability in which remote authenticated users can inject arbitrary script or HTML via the section parameter to index.fcgi. The description confirms the vulnerability is an XSS issue without providing detail...
Zeus < 3.3.5a Web Server Null Byte Request CGI Source Disclosure
Binary data 1447.prm...
Zeus Admin vs_diag.cgi XSS
The remote host is running the Zeus WebServer. There is a vulnerability in the CGI 'vsdiag.cgi' that may allow an attacker to gain administrative access on that server. To exploit this flaw, the attacker would need to lure the administrator of this server to click on a rogue link. %NASLMINLEVEL...
Another ZEUS Server web admin XSS!
Hi, another XSS, now on the ZEUS web admin interface. The tested software is Zeus 4.2r2 webadmin-4.2r2 on Linux x86 This is not the same issue as bid 6144 index.fcgi, now is on "vsdiag.cgi". Exploit is simple: http://target:9090/apps/web/vsdiag.cgi?server=YOURCODE I have read this post:...
Zeus Web Server 4.x - Admin Interface 'VS_Diag.cgi' Cross-Site Scripting
source: https://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, it is possible for an attacker to construct a malicious link which...
CVE-2002-1785
Cross-site scripting XSS vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi...
Zeus Web Server 4.0/4.1 - Admin Interface Cross-Site Scripting
source: https://www.securityfocus.com/bid/6144/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which...
Zeus Web Server 4.04.1 - Admin Interface Cross-Site Scripting
Zeus Web Server 4.04.1 - Admin Interface Cross-Site Scripting source: https://www.securityfocus.com/bid/6144/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input it is...
CVE-2000-0149
Zeus web server allows remote attackers to view the source code for CGI programs via a null character %00 at the end of a URL...
CVE-2000-0149
Zeus Web Server (versions 3.1.x–3.3.5) contains an information disclosure flaw where a null byte (%00) at the end of a URL allows remote attackers to view the source code of CGI scripts. Root cause: improper handling of CGI input leading to source disclosure. Impact is information exposure of CGI...
Zeus Web Server Null Byte Request CGI Source Disclosure
The remote host is running the Zeus Web Server. Versions 3.1.x to 3.3.5 of this web server are vulnerable to a bug that allows an attacker to view the source code of CGI scripts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
zeus.null.txt
This morning Zeus Technology Limited was informed of a serious security bug in the Zeus Webserver by 'The Relay Group' http://relaygroup.com. This document describes the scope of the problem and its solution. Versions affected ----------------- Zeus 3.1.x / 3.3.x Severity -------- High- this bug...
CVE-2000-0149
Zeus web server allows remote attackers to view the source code for CGI programs via a null character %00 at the end of a URL...
CVE-1999-0884
The CVE concerns the Zeus web server’s administrative interface, which uses weak password encryption. The available connected records reiterate this weakness but do not provide product version details, exploit guidance, or specific remediation steps. Practical impact is limited to password confid...
CVE-1999-0884
The Zeus web server administrative interface uses weak encryption for its passwords...
CVE-1999-0883
Zeus web server allows remote attackers to read arbitrary files by specifying the file name in an option to the search engine...
CVE-1999-0883
CVE-1999-0883 : Zeus web server is affected; an attacker can read arbitrary files by supplying a file name to a search engine option. CVSS shows a base score of 10.0 (HIGH) with complete impact to confidentiality, integrity, and availability. The documents do not provide exploitation details or r...
RFP9905.zeus.remote.root.txt
--- Advisory RFP9905 ------------------------------- rfp.labs ----------- Remote root compromise via Zeus webserver Zeus-search vulnerability --------------------------------- rain forest puppy / [email protected] -- Table of contents: - 1. Scope of problem - 2. Solution - 3. Miscellaneous Updates...