Code injection

BEA WebLogic Server 6.1 through 6.1 SP7, 7.0 through 7.0 SP6, 8.1 through 8.1 SP5, and 9.0 allows remote attackers to cause a denial of service server hang via certain requests that cause muxer threads to block when processing error pages...

Ezboxx multiple vulnerabilities.

Ezboxx multiple vulnerabilities. Vulnerable version: Ezboxx Portal System Beta v 0.7.6 and below. The Ezboxx Portal System Beta v 0.7.6 and below versions are vulnerable to Cross-site scripting, Path disclosure and SQL Injection attacks. Cross-site scripting: ---------------------- Description:...

CentOS 4 : squid (CESA-2006:0052)

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

CentOS 3 : squid (CESA-2006:0045)

Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HT...

Macromedia ColdFusion MX application server crossite scripting

Crossite scripting with error pages...

Dwarf HTTP Server < 1.3.3 Multiple Remote Vulnerabilities (XSS, Disc)

The remote host is running Dwarf HTTP Server, a full-featured, Java-based web server. According to its banner, the version of Dwarf HTTP Server on the remote host reportedly fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose th...

squid security update

CentOS Errata and Security Advisory CESA-2006:0045 Updated squid packages that fix a security vulnerability as well as several bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

Moderate: Red Hat Security Advisory: squid security update

An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, a...

CVE-2005-3636

Cross-site scripting XSS vulnerability in SAP Web Application Server WAS 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages...

CVE-2005-3636

The vulnerability CVE-2005-3636 is an XSS flaw in SAP Web Application Server (WAS) 6.10 that allows remote attackers to inject arbitrary web script or HTML through Error Pages. The NVD entry notes a MEDIUM severity (CVSS2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with a partial integrity impact. No exploit de...

CVE-2005-3636

Cross-site scripting XSS vulnerability in SAP Web Application Server WAS 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages...

Cross-Site Scripting in Cherokee Error Pages

The remote web server is vulnerable to a cross-site scripting issue. The remote host is running Cherokee - a fast and tiny web server. Due to a lack of sanitization from the user input, The remote version of this software is vulnerable to cross-site scripting attacks due to lack of sanitization i...

CVE-2005-3424

Summary of CVE-2005-3424 (GNUMP3d) : A cross-site scripting (XSS) vulnerability affecting GNUMP3d prior to 2.9.5 (some sources mention up to 2.9.6) enables remote attackers to inject arbitrary web script or HTML, via crafted 404 error pages. The issue is documented alongside CVE-2005-3425 (a sepa...

Microsoft IS error pages information leak

Request variable SERVERNAME controllable by client is used to validate server access...

ashleyDoS.txt

Update: 10:38 PM 3/27/2005 Subject: " Ashley's Server DoS Exploit " Vulnerable version: Ashley's 1.0 Description: Ashley's Web Server its currently supports perl cgi. Also supported are directory listings,custom front pages, custom error pages.It also supports flash, pdf,realmedia, mp3s, avi's,...

ColdFusion Error Page XSS

Binary data 2893.prm...

IBM WebSphere Application Server crossite scripting

Crossite scripting with error pages...

Cherokee Web Server Error Page XSS

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to cross-site scripting attacks due to lack of sanitization in returned error pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Multiple Full Disclosure Path in postnuke 0.750 phoenix

CODEBUG Labs Advisory 6 Title: Multiple Full Disclosure Path in postnuke 0.750 phoenix Author: FAiN182 - [email protected] Product: Postnuke 0.750 Phoenix Type: Full disclosure path Web: http://www.mantralab.org Personal Site: http://fain182.altervista.org --- the product Postnuke is a CMS...