Lucene search
+L

218 matches found

Openbugbounty
Openbugbounty
added 2015/11/09 9:59 a.m.12 views

neumaticos-conti.com.ar XSS vulnerability

Vulnerable URL: http://www.neumaticos-conti.com.ar/www/neumaticosanes/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:15 GMT Vulnerability type:| XSS Vulnerabili...

6.3AI score
Exploits0
Openbugbounty
Openbugbounty
added 2015/11/09 9:57 a.m.13 views

conti-online.com XSS vulnerability

Vulnerable URL: http://www.conti-online.com/www/automotivekrkr/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:12 GMT Vulnerability type:| XSS Vulnerability...

6.3AI score
Exploits0
NVD
NVD
added 2007/06/29 6:30 p.m.19 views

CVE-2007-3492

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

6.8CVSS6.2AI score0.02661EPSS
Exploits0References5
Prion
Prion
added 2007/06/29 6:30 p.m.14 views

Command injection

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

6.8CVSS6.7AI score0.02661EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2007/06/29 6:0 p.m.48 views

CVE-2007-3492

The vulnerability CVE-2007-3492 affects Conti FtpServer 1.0, where remote authenticated users can trigger a denial of service (daemon crash) by sending a crafted string containing "//A:" in the LIST command argument. The connected documents provide the same description across NVD and CVE records ...

6.8CVSS6.2AI score0.02661EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2007/06/29 6:0 p.m.19 views

CVE-2007-3492

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

6.2AI score0.02661EPSS
Exploits0References5
Packet Storm
Packet Storm
added 2007/06/29 12:0 a.m.25 views

contiftp-dos.txt

Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2007/06/28 12:0 a.m.625 views

Conti FTP Server v1.0 DoS

Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...

0.9AI score
Exploits0
securityvulns
securityvulns
added 2007/06/28 12:0 a.m.20 views

Conti FTP Server DoS

LIST //A: request causes server to hang...

0.8AI score
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2007/06/27 12:0 a.m.15 views

Conti FTP Server 1.0 - Large String Denial of Service

Conti FTP Server 1.0 - Large String Denial of Service source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Serv...

Exploits0
Exploit DB
Exploit DB
added 2007/06/27 12:0 a.m.34 views

Conti FTP Server 1.0 - Large String Denial of Service

source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Server v1.0 Denial of Service author: 35c666 contact: :...

7.4AI score
Exploits0
NVD
NVD
added 2007/01/23 2:28 a.m.15 views

CVE-2006-6950

Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. dot dot in a filename argument...

5CVSS6.7AI score0.01623EPSS
Exploits0References5
NVD
NVD
added 2007/01/23 2:28 a.m.11 views

CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...

4.6CVSS5.7AI score0.00306EPSS
Exploits0References5
Cvelist
Cvelist
added 2007/01/23 2:0 a.m.17 views

CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...

5.7AI score0.00306EPSS
Exploits0References5
Cvelist
Cvelist
added 2007/01/23 2:0 a.m.19 views

CVE-2006-6950

Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. dot dot in a filename argument...

6.7AI score0.01623EPSS
Exploits0References5
CVE
CVE
added 2007/01/23 2:0 a.m.42 views

CVE-2006-6950

The CVE-2006-6950 entry describes a directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8. The issue allows remote attackers to read arbitrary files and list arbitrary directories by providing a filename containing .. (dot dot). The available sources (NVD/NVD-linked entries) confirm ...

5CVSS7.1AI score0.01623EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2007/01/23 2:0 a.m.49 views

CVE-2006-6949

CVE-2006-6949 affects Conti FTPServer 1.0 Build 2.8, where user passwords are stored in cleartext in MyServerSettings.ini. Local users can read this file to obtain sensitive credentials, enabling partial information disclosure. The vulnerability stems from storing passwords in plaintext in a conf...

4.6CVSS6.1AI score0.00306EPSS
Exploits0References5Affected Software1
seebug.org
seebug.org
added 2006/11/21 12:0 a.m.12 views

Conti FTP不安全默认帐号及目录遍历漏洞

Conti FtpServer是Windows平台下的多线程FTP服务器。 Conti FTPServer在处理传送给各种命令的参数时存在输入验证错误,允许攻击者通过目录遍历攻击列出并下载FTP根目录以外任意位置的文件。 Conti FTPServer以明文将用户口令存储到了MyServerSettings.ini文件中,因此攻击者可以轻易的检索到口令,获得非授权访问。 Conti FTPServer 1.0 Build 2.8 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本:...

7.1AI score
Exploits0
Rows per page
Query Builder