718 matches found
[Full-Disclosure] HTTP Response Splitting and SQL injection in megabbs forum
URL: http://www.pd9soft.com Tested megabbs 2.1 1. HTTP Response Splitting http://www.pd9soft.com/megabbs/forums/thread-post.asp?action=writenew&fid=0 d0aContent-Length:2000d0a0d0aHTTP/1.02020020OK0d0aContent-Type:20 text/html0d0aContent-Length:20330d0a0d0a3chtml3eScanned20by20Maxp...
JRun Multiple Vulnerabilities (OF, XSS, ID, Hijacking)
The remote host is running JRun, a J2EE application server running on top of IIS or Apache. There are multiple flaws in the remote version of this software : - The JSESSIONID variable is not implemented securely. An attacker may use this flaw to guess the session id number of other users. Only JR...
CVE-2001-0902
Microsoft IIS 5.0 is affected. The vulnerability allows remote attackers to spoof web log entries by sending HTTP requests containing hex-encoded newline or form-feed characters, enabling log pollution/improper logging. CVE-2001-0902 details indicate impact to log integrity (partial) and potentia...
CVE-2001-1186
Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection...
CVE-2001-1186
CVE-2001-1186 affects Microsoft IIS 5.0. The issue is a denial of service caused by an HTTP request whose Content-Length is larger than the request body, preventing IIS from timing out the connection. The connected documents confirm the same description across NVD and CVE lists. There are no deta...
CVE-2001-0902
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters...
Microsoft IIS FrontPage Extensions Detection
Binary data 2180.prm...
Microsoft IIS FTP Status Request DoS
Binary data 1841.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1707.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1708.prm...
Microsoft IIS Server Detection
Binary data 1724.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1706.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1704.prm...
Microsoft IIS Patch Level Detection (English versions only)
Binary data 1722.prm...
Microsoft IIS viewcode.asp Arbitrary File Access
Binary data 1709.prm...
Microsoft IIS Patch Level Detection (English versions only)
Binary data 1718.prm...
Microsoft IIS Patch Level Detection (English versions only)
Binary data 1720.prm...
Microsoft IIS Patch Level Detection (English versions only)
Binary data 1721.prm...