CVE-2006-0820

CVE-2006-0820 affects the Dwarf HTTP Server (version 1.3.2). The vulnerability group includes two issues: (1) cross-site scripting via error messages, allowing remote attackers to inject arbitrary HTML/script in users’ browsers, and (2) a filename-extension validation flaw that can disclose sourc...

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...