CVE-2006-1700: Undefined Security Weakness

Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication...

CVE-2006-1699: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode...

CVE-2004-1990

Aldo's Web Server (aweb) 1.5 is affected by an information-disclosure vulnerability. Remote attackers can cause the server to reveal the full path and the user running the aweb process via an arbitrary character in a malformed request. Root cause is associated with handling of malformed requests ...

CVE-2004-1991

CVE-2004-1991 affects Aldo’s Web Server (aweb) 1.5. The vulnerability is aDirectory traversal in an HTTP GET request that allows an attacker to view arbitrary files by supplying an improper path using .. (dot dot). The NVD metrics indicate a NETWORK attack vector with low complexity and no authen...

CVE-2004-1990: Undefined Security Weakness

Aldo's Web Server aweb 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request...

CVE-2004-1991: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Aldo's Web Server aweb 1.5 allows remote attackers to view arbitrary files via a .. dot dot in an HTTP GET request...