EUVD-2006-0826

Malware in sbrugna...

EUVD-2006-0825

Malware in sbrugna...

CVE-2006-0820

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

Cross site scripting

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

CVE-2006-0820

CVE-2006-0820 affects the Dwarf HTTP Server (version 1.3.2). The vulnerability group includes two issues: (1) cross-site scripting via error messages, allowing remote attackers to inject arbitrary HTML/script in users’ browsers, and (2) a filename-extension validation flaw that can disclose sourc...

Multiple Dwarf HTTP Server vulnerabilities

Crossite scripting, scripts source code disclosure...

CVE-2006-0820: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages...

CVE-2006-0819: Undefined Security Weakness

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via 1 dot, 2 space, 3 slash, or 4 NULL characters in the filename extension of an HTTP request...

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...