235 matches found
CVE-2004-2651
The CVE-2004-2651 issue affects YaCy before version 0.32 and involves multiple cross-site scripting (XSS) vulnerabilities. In the affected components, an attacker can inject arbitrary web script or HTML via (1) urlmaskfilter in index.html or (2) page in Wiki.html. CVSS base score is 4.3 (I:Partia...
CVE-2004-2651: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmaskfilter parameter to index.html or the 2 page parameter to Wiki.html...
CVE-2003-1277
Cross-site scripting XSS vulnerabilities in Yet Another Bulletin Board YaBB 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into 1 newsicon of newstemplate.php, and 2 threadid a...
CVE-2003-1277: Undefined Security Weakness
Cross-site scripting XSS vulnerabilities in Yet Another Bulletin Board YaBB 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into 1 newsicon of newstemplate.php, and 2 threadid a...
osTicket Backdoored - Active Check
There is a vulnerability in the current version of osTicket that allows an attacker to upload an PHP script, and then access it causing it to execute. This script tries to detect infected servers. Copyright C 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, a...
CVE-2004-2517
The OpenVAS entries confirm a concrete issue in myServer 0.7.1: a remote denial-of-service caused by sending a specially crafted HTTP POST to index.html with View=Logon, leading to the server crash or stop in responding. Affected component is the HTTP POST handling for the Logon operation; the vu...
CVE-2004-2517: Undefined Security Weakness
myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...
Baby Web Server 2.6.2 - Command Validation
Baby Web Server 2.6.2 - Command Validation !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web...
CVE-2004-2517
myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...
CVE-2004-0337: Undefined Security Weakness
Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...
DoS против small http
Наблюдается утечка к памяти при запросе листинга каталога с отсутствующим index.html, сервер перестает отвечать на запросы, если соединения закрывается до начала передачи данных клиенту, кроме того есть локальные атаки...
CVE-2000-0353
Pine 4.x is affected by CVE-2000-0353. A remote attacker can trigger arbitrary commands by providing an index.html that executes lynx to fetch a uudecoded file from a malicious web server, which is then executed by Pine. Impact is described as full confidentiality, integrity, and availability com...
CVE-2000-0353: Undefined Security Weakness
Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine...
CVE-1999-0569
CVE-1999-0569 describes a directory listing vulnerability where a WWW directory URL without an index.html enables auto-indexing, revealing a full file listing. Public sources in connected documents confirm direct exposure of directory contents (confidentiality) and potential impact on integrity a...