EUVD-2005-0336

Malware in sbrugna...

EUVD-2005-0337

Malware in sbrugna...

EUVD-2005-0287

Malware in sbrugna...

CVE-2005-0335

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0286

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a 1 . dot or 2 + plus sign at the end, which returns the source code for that file...

CVE-2005-0286

The CVE-2005-0286 issue affects eMotion MediaPartner Web Server 5.0 and 5.1. A remote attacker can request a .bhtml file ending with a dot (.) or a plus sign (+) to retrieve the file’s source code. The vulnerability description specifies this behavior but does not provide root-cause details, affe...

CVE-2005-0336

CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...

CVE-2005-0335

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0286

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a 1 . dot or 2 + plus sign at the end, which returns the source code for that file...

CVE-2005-0335

CVE-2005-0335 describes a directory traversal vulnerability in EMotion MediaPartner Web Server 5.0. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the URL, taking advantage of improper input handling in the web server’s URL processing. Affected software is EM...

CVE-2005-0335: Undefined Security Weakness

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-0336: Undefined Security Weakness

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0286: Undefined Security Weakness

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a 1 . dot or 2 + plus sign at the end, which returns the source code for that file...