2781 matches found
CVE-2004-0042
vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames...
CVE-2003-1101
Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message...
CVE-2003-1413
parsexml.cgi in Apple Darwin Streaming Server 4.1.1 allows remote attackers to determine the existence of arbitrary files by using ".." sequences in the filename parameter and comparing the resulting error messages...
WebWasher Classic 2.23.3 - Error Message Cross-Site Scripting
WebWasher Classic 2.23.3 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/9039/info It has been reported that a cross-site scripting vulnerability may exist in WebWasher Classic that may allow remote attackers to execute HTML or script code in a user's browser. The...
WebWasher Classic 2.2/3.3 - Error Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/9039/info It has been reported that a cross-site scripting vulnerability may exist in WebWasher Classic that may allow remote attackers to execute HTML or script code in a user's browser. The issue is reported to occur due to error messages returned to th...
Citrix Metaframe XP - Cross-Site Scripting
source: https://www.securityfocus.com/bid/8939/info Citrix Metaframe XP is prone to cross-site scripting attacks when returning error messages to users. The error message is generated when invalid authentication credentials are transmitted to the log-in page. Exploitation of this issue could...
ColdFusion CrossiteScripting
Crossite scripting on error messages generation...
Macromedia ColdFusion MX 6.0 - SQL Error Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/8840/info It has been reported that Macromedia ColdFusion MX may be prone to a cross-site scripting vulnerability due to improper handling of error messages generated by the underlying database. This problem may be exploited by an attacker to construct a...
OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs
OpenSSL ASN.1 0.9.6j0.9.7b - Brute Forcer for Parsing Bugs / Brute forcer for OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffed from an stunnel session / const char...
OpenSSL ASN.1 < 0.9.6j/0.9.7b - Brute Forcer for Parsing Bugs
/ Brute forcer for OpenSSL ASN.1 parsing bugs include include include include include include include include include include include include include include char buf8192; / This was simply sniffed from an stunnel session / const char dacrap =...
ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak
ZH2003-20SA security advisory: Stellar Docs Path Disclosure and Security Leak Published: 10 august 2003 Released: 10 august 2003 Name: Stellar Docs Affected Systems: v1.2 Issue: Remote attackers can know the path of the site and access the administrative section Author: G00db0y zone-h org Vendor:...
geeeekShop 1.4 - Information Disclosure
geeeekShop 1.4 - Information Disclosure source: https://www.securityfocus.com/bid/8380/info geeeekShop is prone to multiple information disclosure vulnerabilities. Passing invalid data as URI parameters to geeeekShop scripts, will cause an error message to be displayed, which contains installatio...
Verity-K2Toolkit-Eng.txt
STG Security Advisory: SSA-20030701-02 Verity K2 Toolkit Query Builder XSS Vulnerability Revision 1.0 Date Published: 2003-07-01 KST Last Update: 2003-07-01 Disclosed by SSR Team [email protected] Summary =================== Verity's K2 Toolkit provides e-commerce developers with text...
Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection
Microsoft Internet Explorer 5 - Custom HTTP Error HTML Injection source: https://www.securityfocus.com/bid/7939/info An issue has been reported for Microsoft Internet Explorer that may result in HTML injection attacks. The vulnerability exists when IE is used to display custom HTTP error messages...
S21SEC-020 - Vignette user enumeration
ID: S21SEC-020-en Title: Vignette user enumeration Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Enumeration of user status Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-020-en.txt Release: External S 2 1 S E C http://www.s21sec.com...
PHP-Nuke module PHP-Banner-Exchange path disclosure
------- Product: PHP-Nuke Vendor: F.Burzi Module: PHP-Banner Exchange Version: 1.2 ------- Accessing directly to the PHP Banner Exchange module and without a specified file : http://target/modules/phpbannerexchange/ phpbannerexchange module directory you get this: Warning: mainmainfile.php...
CVE-2003-0112
Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger...
CVE-2003-0268
SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message...
CVE-2003-0112
CVE-2003-0112 corresponds to a local privilege‑escalation in the Windows kernel. Technical details from connected docs show a buffer/stack overflow in ntoskrnl.exe related to debugging message handling (LpcRequestWaitReplyPort), enabling a local attacker to execute code with kernel privileges. Af...
PHPay 2.2 - Multiple Full Path Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/7309/info phPay has been reported prone to multiple path disclosure vulnerabilities. It has been reported that when specially crafted requests are made for many phPay pages and include files, an error condition may be triggered. The resulting error messag...