141 matches found
CVE-2002-2240
CVE-2002-2240 affects MyServer 0.11 and 0.2, where a directory traversal vulnerability allows remote attackers to read arbitrary files via ".." in an HTTP GET. The issue stems from improper handling of path traversal, enabling access to files outside the web root. The NVD entry lists a CVSSv2 bas...
CVE-2002-2240: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." dot dot in an HTTP GET request...
myserver-xss.txt
MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:alert'xss'; Found By Shay Priel aka Prili...
MyServer文件名解析错误信息泄露漏洞
MyServer是一款HTTP服务程序。 MyServer解析文件名存在问题，远程攻击者可以利用漏洞获得敏感信息。 在提交的脚本URI请求后使用大写的"I"，可导致脚本源代码泄露。 myServer 0.8.9 目前没有详细解决方案提供： http://www.myserverproject.net/ http://www.example.com/cgi-bin/post.mscgI...
Design/Logic Flaw
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
CVE-2007-3365
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
Cross site scripting
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
CVE-2007-3364
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
CVE-2007-3364
CVE-2007-3364 is a reported cross-site scripting (XSS) vulnerability in the MyServer 0.8.9 distribution. The flaw exists in the CGI page cgi-bin/post.mscgi, where an attacker can inject arbitrary web script or HTML through the body content. The available documents identify the affected component ...
CVE-2007-3365
Affected software: MyServer ≤ 0.8.9. Vulnerability: improper handling of uppercase characters in filename extensions. Impact: remote attackers can obtain sensitive information, including script source code, via a modified extension. Evidence from connected docs: description confirms the issue and...
CVE-2007-3365
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
PT-2007-4642 · Myserver · Myserver
Name of the Vulnerable Software and Affected Versions: MyServer versions 0.8.9 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as script source code, by exploiting the improper handling of uppercase characters in filename extensions. This can be...
CVE-2007-3365: Improper Handling of Case Sensitivity
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
CVE-2007-3364: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
MyServer-0.8.9 - xss in sample cgi page
MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:scriptalert'xss';/script Found By Shay Priel aka Prili...
MyServer-0.8.9 - source code disclosure
The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files. Found By:Shay Priel aka Prili site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgI I -...
MyServer 0.8.9 - Filename Parse Error Information Disclosure
MyServer 0.8.9 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects...
MyServer HTTP server multiple security vulnerabilities
Crossite scripting with demo pages, script source code access with capital character in path...
MyServer 0.8.9 - Filename Parse Error Information Disclosure
source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects MyServer 0.8.9; other versions may also be affected...