491 matches found
Acritum Femitter Server 1.03 - Multiple Vulnerabilities
--= Tested on: XP sp 2 Acritum Femitter Server v1.03 is a HTTP and FTP Server for Windows. I came up with few vulnerabilities of this .. some vulns are already has been revelied but some are not so lets have a look HTTP Server ----------- In the Femitter Server Application HTTP tab there are few...
Miniature Java Web Server <= 1.71 Multiple Vulnerabilities
No description provided by source. Exploit Title: Miniature Java Web Server = 1.71 Multiple Vulnerabilities. Date: 26/03/10 Author: cp77fk4r | empty0pageSHIFT+2gmail.comhttp://gmail.com | www.DigitalWhisper.co.ilhttp://www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download...
miniature java Web server 1.71 - Multiple Vulnerabilities
miniature java Web server 1.71 - Multiple Vulnerabilities Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: = 1.71 Tested on: JRE build 1.6.017-b04 Path Traversal: A Path Traversal attack aims to access files and...
miniature java Web server 1.71 - Multiple Vulnerabilities
Exploit Title: Miniature Java Web Server | www.DigitalWhisper.co.il Software Link: http://tjws.sourceforge.net/download Version: \r\n\r\n Lead to: HTTP RE...
PhpCityPortal - Multiple Vulnerabilities
PhpCityPortal - Multiple Vulnerabilities ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from multi SQL !NJECTON Vulnerability Vendor: phpcityportal.com ? Software : PhpCityPortal - pR!CE : -PURCHASE 1 LICENSE - $149 each -PURCHASE 3 LICENSES -...
ViewVC Versions Prior to 1.1.3 Multiple Remote Vulnerabilities
ViewVC is prone to these security vulnerabilities: - A security vulnerability that involves root listing of per-root authorization configuration. - A security vulnerability in 'query.py' involving the 'forbidden' authorizer or none. Versions prior to ViewVC 1.1.3 are vulnerable. OpenVAS...
SonicWALL Global VPN Client 4.0 - Log File Remote Format String
SonicWALL Global VPN Client 4.0 - Log File Remote Format String source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to ...
SonicWALL Global VPN Client 4.0 - Log File Remote Format String
source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...
Online Guestbook Pro (display) Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Online Guestbook Pro display Blind SQL Injection Vulnerability ================================================================ Online Guestbook Pro display Blind SQL Injecti...
phpGreetCards XSS/Arbitrary File Upload Vulnerability
Exploit for unknown platform in category web applications ===================================================== phpGreetCards XSS/Arbitrary File Upload Vulnerability =====================================================...
Cross site scripting
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
DEBIAN-CVE-2008-2168
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
CVE-2008-2168
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
CVE-2008-2168
CVE-2008-2168 : The linked SUSE/NVD entries describe a cross-site scripting (XSS) vulnerability in Apache HTTP Server up to version 2.2.6 and earlier, exploitable via UTF-7 encoded URLs that are mishandled when rendering the 403 Forbidden error page. Attacker-provided URL input can inject arbitra...
CVE-2008-2168
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
CVE-2008-2168: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page...
apache-utf7xss.txt
Apache Server HTML Injection and UTF-7 XSS Vulnerability This vulnerability was found by Yaniv Miron and Yossi Yakubov. This vulnerability will allow an attacker to inject an XSS to any Apache server that use the Forbidden 403 default page. After injecting this string:...
CVE-2008-1292
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading 1 forbidden pathnames in the revision view, 2 log history that can only be reached by traversing a forbidden object, or 3...
CVE-2008-1290
ViewVC before 1.0.5 includes "all-forbidden" files within search results that list CVS or Subversion SVN commits, which allows remote attackers to obtain sensitive information...
CVE-2008-1292: Exposure of Sensitive Information to an Unauthorized Actor
ViewVC before 1.0.5 provides revision metadata without properly checking whether access was intended, which allows remote attackers to obtain sensitive information by reading 1 forbidden pathnames in the revision view, 2 log history that can only be reached by traversing a forbidden object, or 3...