MyServer 0.8.9 Filename Parse Error Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects MyServer 0.8.9; other versio...

myserver-xss.txt

MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:alert'xss'; Found By Shay Priel aka Prili...

CVE-2007-3364

Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...

CVE-2007-3364

CVE-2007-3364 is a reported cross-site scripting (XSS) vulnerability in the MyServer 0.8.9 distribution. The flaw exists in the CGI page cgi-bin/post.mscgi, where an attacker can inject arbitrary web script or HTML through the body content. The available documents identify the affected component ...

PT-2007-4642 · Myserver · Myserver

Name of the Vulnerable Software and Affected Versions: MyServer versions 0.8.9 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as script source code, by exploiting the improper handling of uppercase characters in filename extensions. This can be...

MyServer 0.8.9 - Filename Parse Error Information Disclosure

MyServer 0.8.9 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects...

MyServer-0.8.9 - source code disclosure

The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files. Found By:Shay Priel aka Prili site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgI I -...

MyServer 0.8.9 - Filename Parse Error Information Disclosure

source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects MyServer 0.8.9; other versions may also be affected...