Lucene search
+L

587 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/11/05 12:00 a.m.•6 views

CVE-2003-0621: Undefined Security Weakness

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence of files outside the web root via modified paths in the INIFILE argument...

5CVSS5.9AI score0.08048EPSS
SaveExploits2References1
Tenable Nessus
Tenable Nessus
•added 2003/06/12 12:00 a.m.•22 views

NETGEAR Router Default Password (password) for 'admin' Account

This NETGEAR Router/Access Point has the default password set for the web administration console 'admin'/'password'. This console provides read or write access to the router's configuration. An attacker can take advantage of this to reconfigure the router and possibly re-route traffic...

5.5AI score
SaveExploits0
CVE
CVE
•added 2003/04/02 5:00 a.m.•63 views

CVE-2002-1081

The CVE-2002-1081 entry concerns Abyss Web Server 1.0.3. Affected component: the Administration console. Root cause: remote authentication bypass allows reading files by issuing an HTTP request to a target file whose path ends with a "+" character. Impact: unauthorized disclosure of files without...

5CVSS7AI score0.01539EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/04/02 12:00 a.m.•5 views

CVE-2002-1081: Undefined Security Weakness

The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character...

5CVSS5.8AI score0.01539EPSS
SaveExploits0References1
CVE
CVE
•added 2002/08/31 4:00 a.m.•63 views

CVE-2002-1080

The CVE-2002-1080 entry affects Abyss Web Server 1.0.3 prior to Patch 2. Remote attackers can gain privileges and modify server configuration through direct requests to CHL files (srvstatus.chl, consport.chl, general.chl, srvparam.chl, advanced.chl). The available sources confirm the affected pro...

7.5CVSS7.4AI score0.01791EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/08/31 12:00 a.m.•4 views

CVE-2002-1080: Undefined Security Weakness

The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as 1 srvstatus.chl, 2 consport.chl, 3 general.chl, 4 srvparam.chl, and 5 advanced.chl...

7.5CVSS5.9AI score0.01791EPSS
SaveExploits1References1
Exploit DB
Exploit DB
•added 1999/01/14 12:00 a.m.•65 views

Microsoft IIS 4 (Windows NT) - Remote Web-Based Administration

source: https://www.securityfocus.com/bid/189/info Web-based administration for IIS 4.0 is, by default, limited to the local loopback address, 127.0.0.1. In instances where IIS4.0 was installed as an upgrade to IIS 2.0 or 3.0, a legacy ISAPI DLL ISM.DLL is left in the /scripts/iisadmin directory...

2.1CVSS5.8AI score0.25267EPSS
SaveExploits2
Rows per page
Query Builder