5040 matches found
CVE-2002-0457
Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as , , and & in fields such as 1 name, 2 email, 3 AIM screen name, 4 website, 5 location, or 6 message...
Microsoft MSN Messenger 1 < 4 - Malformed Invite Request Denial of Service
source: https://www.securityfocus.com/bid/4827/info Microsoft's MSN Messenger is an instant messenging client for Windows based machines, based on the Passport system. A vulnerability has been reported in some versions of MSN Messenger. Under some circumstances, it may be possible to crash the...
CVE-2001-1248
CVE-2001-1248 affects vWebServer 1.2.0, enabling remote attackers to view arbitrary ASP scripts by requesting an ASP file that ends with a URL-encoded space (%20). The issue is classified as a information-disclosure vulnerability (CVSSv2 base score 5.0, AV:N/AC:L/Au:N/C:P/I:N/A:N); no exploit spe...
Abyss Web Server 1.0 - File Disclosure
source: https://www.securityfocus.com/bid/4466/info Abyss Web Server is a freely available personal web server. It is maintained by Aprelium Technologies and runs on Microsoft Windows operating systems, as well as Linux. It is possible for a remote attacker to disclose the contents of arbitrary...
CSSearch 2.3 - Remote Command Execution
source: https://www.securityfocus.com/bid/4368/info csSearch is a website search script, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft operating systems. csSearch is prone to an issue which may enable an attacker to execute Perl code with the privileges of the...
CVE-2002-0118
Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board UBB 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag...
CVE-2001-0784
CVE-2001-0784 refers to a directory traversal flaw in Icecast 1.3.10 and earlier. The OpenVAS/Nessus-derived data confirms that an attacker can use specially crafted URLs to read arbitrary files on the affected system due to insufficient input sanitization. The vulnerability affects Icecast’s web...
CVE-2001-0530
Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters...
CVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. dot dot sequences containing "%2e" strings...
CVE-2001-0530
Spearhead NetGAP 200 and 300 before build 78 are affected by a remote exploit that bypasses file blocking and content inspection via specially encoded URLs containing '%' characters. Impact is partial confidentiality according to CVSS v2. No explicit remediation is provided in the available docum...
CVE-2001-0692
SMTP proxy in WatchGuard Firebox 2500 and 4500 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes...
CVE-1999-1547
CVE-1999-1547 affects Oracle Web Listener 2.1. An attacker can bypass access restrictions by replacing a character in the URL with its HTTP-encoded (hex) equivalent, enabling remote access without authentication. The CVSS2 base vector indicates Network access, low attack complexity, no user inter...
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion
Cisco Secure IDS 2.03.0 Snort 1.x ISS RealSecure 56 NFR 5.0 - Encoded IIS Detection Evasion source: https://www.securityfocus.com/bid/3292/info The Microsoft IIS web server supports a non-standard method of encoding web requests. Because this method is non-standard, intrusion detection systems ma...
BEA WebLogic Hex Encoded Request JSP Source Disclosure
The version of BEA WebLogic installed on the remote host may be tricked into revealing the source code of JSP scripts by using simple URL encoding of characters in the filename extension. %NASLMINLEVEL 70300 This script was written by Gregory Duchemin See the Nessus Scripts License for details...
SimpleServer:WWW 1.0.71.0.81.13 - Hex Encoded URL Directory Traversal
SimpleServer:WWW 1.0.71.0.81.13 - Hex Encoded URL Directory Traversal source: https://www.securityfocus.com/bid/3112/info SimpleServer:WWW is a freely available HTTP daemon available from AnalogX. It is designed for simplicity of operation. A problem with the web server could allow a remote user ...
SimpleServer:WWW 1.0.7/1.0.8/1.13 - Hex Encoded URL Directory Traversal
source: https://www.securityfocus.com/bid/3112/info SimpleServer:WWW is a freely available HTTP daemon available from AnalogX. It is designed for simplicity of operation. A problem with the web server could allow a remote user to execute arbitrary commands, and potentially gain local access to th...
SimpleServer:WWW Encoded Traversal Arbitrary Command Execution
By sending a specially encoded string to the remote server, it is possible to execute remote commands with the privileges of the server. This script was written by Mathieu Meadele Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Added BugtraqID...
Advisory for Jana server
Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...