56 matches found
RHEL 2.1 : php (RHSA-2006:0567)
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. ...
CentOS 3 / 4 : php (CESA-2005:748)
Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...
RHEL 4 : php (RHSA-2006:0276)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2006:0276 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The phpinfo PHP function did not properly sanitize...
CVE-2000-0773
Summary: Bajie HTTP web server 0.30a contains a path traversal vulnerability that allows a remote attacker to read arbitrary files by using a URL containing a dot-dot sequence ("...."). The root cause is insufficient validation of path components in the HTTP request, resulting in potential partia...
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2000-0773: Undefined Security Weakness
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...
CVE-2003-1543
Cross-site scripting XSS vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message...
Multiple vulnerability in NetServe 1.0.7
/ | For Contacts: | nimber | e-mail: [email protected] | [email protected] |Home Page: www.nimber.plux.ru |ICQ: 132614 Advisory Information: ================= Application : NetServe Web Server Date : 17.11.2003 Vendor Homepage : http://www.starlots.com/netx/index.html Versions : 1.0.7 maybe older...
Important: Red Hat Security Advisory: : : : Updated apache and mod_ssl packages available
Updated Apache and modssl packages which fix a number of security issues are now available for iSeries and pSeries systems. The Apache HTTP Web Server is a secure, efficient, and extensible web server. This erratum provides updated Apache and modssl packages for iSeries and pSeries that correct a...
Low: Red Hat Security Advisory: : Updated httpd packages fix security vulnerabilities.
Updated httpd packages which fix a number of security issues are now available for Red Hat Linux 8.0 and 9. The Apache HTTP Web Server is a secure, efficient, and extensible Web server that provides HTTP services. A memory leak in Apache 2.0 through 2.0.44 allows remote attackers to cause a...
CVE-2002-1009
The CVE-2002-1009 issue affects Lil’ HTTP Server (LilHTTP Web Server) via the pbcgi.cgi module. A cross-site scripting vulnerability allows remote attackers to inject and execute arbitrary web scripts in users’ browsers by supplying malicious input in the Name or E-mail parameters. This is a netw...
CVE-2002-1009: Undefined Security Weakness
Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the 1 "Name" or 2 "E-mail" parameters...
CVE-2002-1008: Undefined Security Weakness
Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the...
CVE-2000-0773
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack...