4544 matches found
CVE-2003-0803
Nokia Electronic Documentation NED 5.0 allows remote attackers to use NED as an open HTTP proxy via a URL in the location parameter, which NED accesses and returns to the user...
CVE-2003-0802
Nokia Electronic Documentation NED 5.0 allows remote attackers to obtain a directory listing of the WebLogic web root, and the physical path of the NED server, via a "retrieve" action with a location parameter of . dot...
Multiple Nokia Electronic Documentation bugs
Crossite scripting, path disclosure, open proxy...
Nokia Electronic Documentation - Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Nokia Electronic Documentation - Multiple Vulnerabilities Release Date: 09/15/2003 Application: NED Nokia Electronic Documentation Platform: Windows NT4 and WebLogic tested others may be...
Nokia Electronic Documentation 5.0 - Cross-Site Scripting
Nokia Electronic Documentation 5.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitizati...
Nokia Electronic Documentation 5.0 - Path Disclosure
Nokia Electronic Documentation 5.0 - Path Disclosure source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a...
Nokia Electronic Documentation 5.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitization performed on user supplied data. A remote attacker may...
Nokia Electronic Documentation 5.0 - Connection redirection
source: https://www.securityfocus.com/bid/8625/info A vulnerability has been discovered in Nokia Electronic Documentation NED that may allow an attacker to redirect connections to a third party system. The problem likely occurs due to the NED server failing to sufficiently verify hosts provided...
Nokia Electronic Documentation 5.0 - Path Disclosure
source: https://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a NED page. Exploitation will also have the side-effect...
MySQL 3.23.x/4.0.x Remote Exploit
Exploit for linux platform in category remote exploits ================================= MySQL 3.23.x/4.0.x Remote Exploit ================================= / Mysql 3.23.x/4.0.x remote exploit proof of concept using jmp eax bkbll bkbll cnhonker.net,bkbll tom.com 2003/09/12 compile:gcc -o mysql...
Python 2.2/2.3 - Documentation Server Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/7353/info It has been reported that the Python Documentation Server is vulnerable to a cross-site scripting problem in error pages. Because of this, an attacker could potentially cause the execution of malicious HTML and script code in the browser of a we...
Python 2.22.3 - Documentation Server Error Page Cross-Site Scripting
Python 2.22.3 - Documentation Server Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/7353/info It has been reported that the Python Documentation Server is vulnerable to a cross-site scripting problem in error pages. Because of this, an attacker could potentially cause t...
XSS in Python Documentation Server
=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::=:=:=::= topic: XSS in Python Documentation Server product: Python 2.2.2 and 2.3a2 for Win32 vendor: http://www.python.org risk: low date: 04/02/2k3 tested platform: Windows 98 Second Edition discovered by: euronymous /F0KP advisory urls:...
Microsoft Windows SMB Registry : Winlogon Cached Password Weakness
The registry key 'HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ Winlogon\CachedLogonsCount' is not 0. Using a value greater than 0 for the CachedLogonsCount key indicates that the remote Windows host locally caches the passwords of the users when they login, in order to continue to allow the...
Oracle 9iAS soapdocs Directory Remote Information Disclosure
It is possible to access the Oracle 9iAS Application Server's SOAP documentation directory, which contain the install scripts used with the default SOAP install. These files might be useful for an attacker to determine which application server is in use as well as the name of the disk where Oracl...
Sun AnswerBook2 1.x - Unauthorized Administrative Script Access
Sun AnswerBook2 1.x - Unauthorized Administrative Script Access source: https://www.securityfocus.com/bid/5383/info Sun Microsystems AnswerBook2 allows users to view Sun documentation through a web browser, and is available for Solaris. AnswerBook2 includes an administrative web interface...
Mandrake Security may make unexpected system modifications
Overview The Mandrake Security utility included with Mandrake Linux may make unexpected modifications that affect system security. Description Mandrake Linux includes a tool named Mandrake Security msec that allows system administrators to manage and audit various system parameters associated wit...
ATMSNMPD Vulnerable but not Addressed
ATMSNMPD vulnerable???? Yep! I am challenging anyone out there to find information on line stating that Sun's ATMSNMPD is vulnerable to attack. As of today May 13 2002 there is no information identifying this fact. If you are running SunATM 4.0 or 5.0 and have not added the patches below you are...
Cobalt cube3 css
Try either of the following URLs against your RAQ3 http://host/nav/cList.php?root=/scripth1www.snosoft.com rocks/h1 http://host/nav/cList.php?root=/scriptscriptalert'Snosoft Rocks'/script You will see your code followed by this chunk of java code that was trying to run. "; // get tab configuratio...
