Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2026/09/28 7:48 a.m.•39 views

CVE-2026-82383 Apache Roller: Anonymous setup action allows frontpage configuration tampering

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value the frontpage weblog selection on any installed instance, because the setup action remains anonymously reachable after installatio...

8.2CVSS0.00491EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/28 7:48 a.m.•9 views

CVE-2026-82383 Apache Roller: Anonymous setup action allows frontpage configuration tampering

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value the frontpage weblog selection on any installed instance, because the setup action remains anonymously reachable after installatio...

8.2CVSS6AI score
SaveExploits0References5
Hacker One
Hacker One
•added 2023/09/25 5:08 p.m.•114 views

U.S. Dept Of Defense: Information Disclosure FrontPage Configuration Information

An information disclosure vulnerability was discovered in the Microsoft FrontPage configuration of a subdomain. This vulnerability allowed an attacker to view the version number and scripting paths of Sharepoint using Firefox...

6.2AI score
SaveExploits0
Hacker One
Hacker One
•added 2019/12/19 11:03 a.m.•62 views

MTN Group: Information Disclosure FrontPage Configuration Information /_vti_inf.html in https://www.mtn.co.za/

Hi there i found a information disclosure Microsoft FrontPage configuration in the subdomain https://www.mtn.co.za/ that allows me to see version number and scripting paths off sharepoint using firefox. POC: Go to the following url: https://www.mtn.co.za/vtiinf.html and you will see a blank page...

6.2AI score
SaveExploits0
Rows per page
Query Builder