EUVD-2005-0287

Malware in sbrugna...

EUVD-2005-0337

Malware in sbrugna...

EUVD-2005-0336

Malware in sbrugna...

CVE-2005-0286

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a 1 . dot or 2 + plus sign at the end, which returns the source code for that file...

CVE-2005-0335

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0286

eMotion MediaPartner Web Server 5.0 and 5.1 allows remote attackers to obtain sensitive information via an HTTP request for a .bhtml file that contains a 1 . dot or 2 + plus sign at the end, which returns the source code for that file...

CVE-2005-0335

Directory traversal vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to read arbitrary files via a .. dot dot in the URL...

CVE-2005-0335

CVE-2005-0335 describes a directory traversal vulnerability in EMotion MediaPartner Web Server 5.0. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the URL, taking advantage of improper input handling in the web server’s URL processing. Affected software is EM...

CVE-2005-0286

The CVE-2005-0286 issue affects eMotion MediaPartner Web Server 5.0 and 5.1. A remote attacker can request a .bhtml file ending with a dot (.) or a plus sign (+) to retrieve the file’s source code. The vulnerability description specifies this behavior but does not provide root-cause details, affe...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2005-0336

CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...

Portcullis Security Advisory 05-003

Portcullis Security Advisory Vulnerable System: MediaPartner 5.0 Vulnerability Title: In Place Password Update Process Flawed Vulnerability discovery and development: Portcullis Security Testing Service Affected systems: Emotion MediaPartner Web Server Version 5.0 5.1 not confirmed Details: The...

Portcullis Security Advisory 05-010

Portcullis Security Advisory Vulnerable System: MediaPartner 5.0 Vulnerability Title: Directory Traversal Vulnerability and Cross Site Scripting Issue Vulnerability discovery and development: Portcullis Security Testing Service Affected systems: Emotion MediaPartner Web Server Version 5.0 5.1 not...

Portcullis Security Advisory 05-004

Portcullis Security Advisory Vulnerable System: MediaPartner 5.0 Vulnerability Title: In Place Password Update Process Flawed Vulnerability discovery and development: Portcullis Security Testing Service Affected systems: Emotion MediaPartner Web Server Version 5.0 5.1 not confirmed Details: The...

PSA05-010.txt

Portcullis Security Advisory Vulnerable System: MediaPartner 5.0 Vulnerability Title: Directory Traversal Vulnerability and Cross Site Scripting Issue Vulnerability discovery and development: Portcullis Security Testing Service Affected systems: Emotion MediaPartner Web Server Version 5.0 5.1 not...