39 matches found
Blue Shield Web Page Tamper Protection System Has Arbitrary Source Code File Download Vulnerability
BlueShield Web Tamper Protection System is a web page tampering prevention product. Blueshield Web Tamper Protection System has an arbitrary source code file download vulnerability. As long as the php followed by %20, %2e, ::$DATA may download php files, allowing attackers to obtain the source...
NaviCOPA <= 3.0.1.2 Source Disclosure
No description provided by source. NaviCOPA Web Server = 3.0.1.2 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: www.navicopa.com/download.html - Description - NaviCOPA Web Server = 3.0.1.2 is a Windows based HTTP server. This is the latest version of the application...
CVE-2009-5120
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...
CVE-2009-5120
The default configuration of Apache Tomcat in Websense Manager in Websense Web Security 7.0 and Web Filter 7.0 allows connections to TCP port 1812 from arbitrary source IP addresses, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via UTF-7 text to the 404...
Mongoose Web Server 2.8 - Source Disclosure
Mongoose Web Server = 2.8.0 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: http://code.google.com/p/mongoose/ - Description - Mongoose Web Server = 2.8.0 is a Windows based HTTP server. This is the latest version of the application available. Mongoose is vulnerable to...
httpdx 1.4.6b - Source Disclosure
httpdx = 1.4.6b Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: httpdx.sourceforge.net/downloads/ - Description - httpdx Web Server = 1.4.6b is a Windows based HTTP server. This is the latest version of the application available. httpdx is vulnerable to remote arbitrar...
httpdx <= 1.4.6b source disclosure
Exploit for unknown platform in category web applications ================================== httpdx = 1.4.6b source disclosure ================================== httpdx = 1.4.6b Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: httpdx.sourceforge.net/downloads/ -...
Mongoose Web Server 2.8.0 Source Disclosure
Mongoose Web Server = 2.8.0 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: http://code.google.com/p/mongoose/ - Description - Mongoose Web Server = 2.8.0 is a Windows based HTTP server. This is the latest version of the application available. Mongoose is vulnerable to...
Femitter HTTP Server 1.03 - Remote Source Disclosure
Femitter HTTP Server 1.03 - Remote Source Disclosure Femitter HTTP Server v1.03 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: www.acritum.com - Description - Acritum Femitter Web Server v1.03 is a Windows based HTTP server. This is the latest version of the applicati...
Kolibri+ Web Server 2 Remote Arbitrary Source Code Disclosure #2
No description provided by source. Kolibri+ Web Server 2 Remote Arbitrary Source Code Disclosure aka: More fun with Kolibri+ 2 webserver Found By: DrIDE Tested On: Windows XPSP3 - Description - Kolibri+ 2 Web Server is a Windows based HTTP server. This is the latest version of the application...
Kolibri+ Web Server 2 - Arbitrary Source Code Disclosure (2)
Kolibri+ Web Server 2 - Arbitrary Source Code Disclosure 2 Kolibri+ Web Server 2 Remote Arbitrary Source Code Disclosure aka: More fun with Kolibri+ 2 webserver Found By: DrIDE Tested On: Windows XPSP3 - Description - Kolibri+ 2 Web Server is a Windows based HTTP server. This is the latest versio...
Xerver HTTP Server 4.32 Disclosure
Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...
Kolibri+ Web Server 2 - Arbitrary Source Code Disclosure (2)
Kolibri+ Web Server 2 Remote Arbitrary Source Code Disclosure aka: More fun with Kolibri+ 2 webserver Found By: DrIDE Tested On: Windows XPSP3 - Description - Kolibri+ 2 Web Server is a Windows based HTTP server. This is the latest version of the application available. This vulnerability is simil...
CVE-2007-3320
The Avaya 4602SW IP Phone Model 4602D02A with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresses, which allows remote attackers to have an unspecified impact...
Code injection
response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...
CVE-2006-0814
Lighttpd on Windows (1.4.10 and possibly earlier) is affected by an information disclosure vulnerability where specially crafted requests containing trailing dots or spaces bypass Windows handling and cause disclosure of script/source code. Root cause is improper validation of filename extensions...
CVE-2006-0814
response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...
CVE-2006-0814: Undefined Security Weakness
response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...
Microsoft IIS / Site Server codebrws.asp Arbitrary Source Disclosure
Microsoft's IIS 5.0 web server is shipped with a set of sample files to demonstrate different features of the ASP language. One of these sample files allows a remote user to view the source of any file in the web root with the extension .asp, .inc, .htm, or .html. %NASLMINLEVEL 70300 This script...