CVE-2006-5819: Undefined Security Weakness

Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script...

CVE-2006-3258: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 filter or 2 sort parameters...

biblenet.txt

Biblenet.net Homepage: http://www.biblenet.net Affected files: gettinginvolved.html register.php member.php /library/index.html ----------------------------------------- Biblespace uses vBulletin for most of their site, so most of these vulns are based in the vbulletin site themselves, which othe...

CVE-2006-2484: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...

CVE-2004-2651

The CVE-2004-2651 issue affects YaCy before version 0.32 and involves multiple cross-site scripting (XSS) vulnerabilities. In the affected components, an attacker can inject arbitrary web script or HTML via (1) urlmaskfilter in index.html or (2) page in Wiki.html. CVSS base score is 4.3 (I:Partia...

CVE-2004-2651: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the 1 urlmaskfilter parameter to index.html or the 2 page parameter to Wiki.html...

CVE-2003-1277

Cross-site scripting XSS vulnerabilities in Yet Another Bulletin Board YaBB 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into 1 newsicon of newstemplate.php, and 2 threadid a...

CVE-2003-1277: Undefined Security Weakness

Cross-site scripting XSS vulnerabilities in Yet Another Bulletin Board YaBB 1.5.0 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into 1 newsicon of newstemplate.php, and 2 threadid a...

osTicket Backdoored - Active Check

There is a vulnerability in the current version of osTicket that allows an attacker to upload an PHP script, and then access it causing it to execute. This script tries to detect infected servers. Copyright C 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, a...

CVE-2004-2517

The OpenVAS entries confirm a concrete issue in myServer 0.7.1: a remote denial-of-service caused by sending a specially crafted HTTP POST to index.html with View=Logon, leading to the server crash or stop in responding. Affected component is the HTTP POST handling for the Logon operation; the vu...

CVE-2004-2517: Undefined Security Weakness

myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...

Baby Web Server 2.6.2 - Command Validation

Baby Web Server 2.6.2 - Command Validation !/bin/perl Baby Web Server Command Validation Exploit -------------------------------------------------- Infam0us Gr0up - Securiti Research E:\nc -v localhost 80 Infam0us-Gr0up 127.0.0.1 80 http open GET HTTP HTTP/1.0 400 Bad Request Server: Baby Web...

CVE-2004-2517

myServer 0.7.1 allows remote attackers to cause a denial of service crash via a long HTTP POST request in a View=Logon operation to index.html...

CVE-2004-0337: Undefined Security Weakness

Cross-site scripting XSS vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / slash and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be...

DoS против small http

Наблюдается утечка к памяти при запросе листинга каталога с отсутствующим index.html, сервер перестает отвечать на запросы, если соединения закрывается до начала передачи данных клиенту, кроме того есть локальные атаки...

CVE-2000-0353

Pine 4.x is affected by CVE-2000-0353. A remote attacker can trigger arbitrary commands by providing an index.html that executes lynx to fetch a uudecoded file from a malicious web server, which is then executed by Pine. Impact is described as full confidentiality, integrity, and availability com...

CVE-2000-0353: Undefined Security Weakness

Pine 4.x allows a remote attacker to execute arbitrary commands via an index.html file which executes lynx and obtains a uudecoded file from a malicious web server, which is then executed by Pine...

CVE-1999-0569

A URL for a WWW directory allows auto-indexing, which provides a list of all files in that directory if it does not contain an index.html file...

CVE-1999-0569

CVE-1999-0569 describes a directory listing vulnerability where a WWW directory URL without an index.html enables auto-indexing, revealing a full file listing. Public sources in connected documents confirm direct exposure of directory contents (confidentiality) and potential impact on integrity a...