BEA application server Admin console crossite scripting

Crossite scripting with http://server:8001/console/actions/jndi/JndiFramesetAction/...

Oracle Application Server 9i Webcache - Arbitrary File Corruption

Oracle Application Server 9i Webcache - Arbitrary File Corruption source: https://www.securityfocus.com/bid/13420/info Oracle Application Server 9i Webcache is prone to an arbitrary file corruption vulnerability. The issue exists becaue dangerous characters are not removed from a certain paramete...

Cross Site Scripting in Oracle Webcache 9i

Name Cross Site Scripting in Oracle Webcache 9i Systems Affected Oracle Application Server with Webcache 9i Severity Low Risk Category Cross Site Scripting Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 2005 V 1.00 Advisory AKSEC2003-011 Ti...

Oracle Application Server 9i Webcache - Arbitrary File Corruption

source: https://www.securityfocus.com/bid/13420/info Oracle Application Server 9i Webcache is prone to an arbitrary file corruption vulnerability. The issue exists becaue dangerous characters are not removed from a certain parameter value, allowing an attacker to construct a URI that contains an...

Oracle Application Server 9i - Webcache Cache_dump_file Cross-Site Scripting

source : https://www.securityfocus.com/bid/13421/info A remote cross-site scripting vulnerability affects the Oracle Application Server 9i Webcache administration console. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamical...

Oracle Application Server Web Cache OHS mod_access Authentication Bypass

Binary data 2866.prm...

Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass

Oracle Application Server 9.0 - HTTP Service ModAccess Restriction Bypass source: https://www.securityfocus.com/bid/13418/info Oracle HTTP ServerOHS of Oracle Application Server is prone to an access restriction bypass vulnerability. It is possible to configure a list of forbidden URIs in OHS. Th...

Oracle Application Server 9.0 - HTTP Service Mod_Access Restriction Bypass

source: https://www.securityfocus.com/bid/13418/info Oracle HTTP ServerOHS of Oracle Application Server is prone to an access restriction bypass vulnerability. It is possible to configure a list of forbidden URIs in OHS. This is accomplished using 'modaccess'. A URI that is listed is not supposed...

CVE-2005-1112

The vulnerability CVE-2005-1112 affects IBM WebSphere Application Server 6.0 and earlier when the web server shares its document root. An HTTP request with an invalid/ nonexistent Host header causes the request to be processed by the web server instead of the JSP engine, allowing remote attackers...

CVE-2005-1112

IBM WebSphere Application Server 6.0 and earlier, when sharing the document root of the web server, allows remote attackers to obtain the source code for Java Server Pages .jsp via an HTTP request with an invalid Host header, which causes the page to be processed by the web server instead of the...

IBM WebSphere application server information leak

It's possible to obtain JSP page source code by requesting non-existing virtual host...

IBM WebSphere Application Server Malformed Host Header JSP Source Disclosure

It is possible to make the remote web server disclose the source code of its JSP pages by requesting the pages with a nonexistent hostname in the HTTP 'Host' header request when WebSphere Application is sharing the document root of the web server. An attacker may use this flaw to get the source...

Oracle Application Server 10g Detection

Binary data 2830.prm...

Oracle Application Server J2EE Container Detection

Binary data 2831.prm...

IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure

IBM Websphere 5.05.16.0 - Application Server Web Server Root JSP Source Code Disclosure source: https://www.securityfocus.com/bid/13160/info A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to...

IBM Websphere 5.0/5.1/6.0 - Application Server Web Server Root JSP Source Code Disclosure

source: https://www.securityfocus.com/bid/13160/info A remote JSP source disclosure vulnerability reportedly affects the IBM WebSphere Application Server. This issue is due to a failure of the application to properly handle various requests under certain circumstances. It should be noted that thi...

Macromedia Coldfusion MX application server information leak

Compilde JAVA pages are stored in the Web accessible directory...

EUVD-2002-1622

Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server 9iAS allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2002-1635

The CVE-2002-1635 entry concerns Oracle 9i Application Server (9iAS) where the Apache httpd.conf uses a Location alias for /perl instead of a ScriptAlias. This misconfiguration enables a remote attacker to read the source code of arbitrary CGI files via a URL that targets /perl rather than /cgi-b...

CVE-2002-1637

Oracle 9i Application Server (9iAS) is affected by CVE-2002-1637 due to default credentials configured across multiple components. Over 160 usernames/passwords are present (e.g., SYS, SYSTEM, AQJAVA, OWA, IMAGEUSER, USER1, USER2, PLSQL, DEMO, FINANCE), which can allow privilege escalation for att...