131 matches found
myserver-xss.txt
MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:alert'xss'; Found By Shay Priel aka Prili...
MyServer文件名解析错误信息泄露漏洞
MyServer是一款HTTP服务程序。 MyServer解析文件名存在问题，远程攻击者可以利用漏洞获得敏感信息。 在提交的脚本URI请求后使用大写的"I"，可导致脚本源代码泄露。 myServer 0.8.9 目前没有详细解决方案提供： http://www.myserverproject.net/ http://www.example.com/cgi-bin/post.mscgI...
Design/Logic Flaw
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
CVE-2007-3365
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
Cross site scripting
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
CVE-2007-3364
Cross-site scripting XSS vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary web script or HTML via the body content...
CVE-2007-3364
CVE-2007-3364 is a reported cross-site scripting (XSS) vulnerability in the MyServer 0.8.9 distribution. The flaw exists in the CGI page cgi-bin/post.mscgi, where an attacker can inject arbitrary web script or HTML through the body content. The available documents identify the affected component ...
CVE-2007-3365
Affected software: MyServer ≤ 0.8.9. Vulnerability: improper handling of uppercase characters in filename extensions. Impact: remote attackers can obtain sensitive information, including script source code, via a modified extension. Evidence from connected docs: description confirms the issue and...
CVE-2007-3365
MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sensitive information script source code via a modified extension, as demonstrated by post.mscgI...
PT-2007-4642 · Myserver · Myserver
Name of the Vulnerable Software and Affected Versions: MyServer versions 0.8.9 and earlier Description: The issue allows remote attackers to obtain sensitive information, such as script source code, by exploiting the improper handling of uppercase characters in filename extensions. This can be...
MyServer-0.8.9 - xss in sample cgi page
MyServer-0.8.9 - xss in sample cgi page ---------------------------------------- site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgi Post:scriptalert'xss';/script Found By Shay Priel aka Prili...
MyServer 0.8.9 - Filename Parse Error Information Disclosure
MyServer 0.8.9 - Filename Parse Error Information Disclosure source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects...
MyServer-0.8.9 - source code disclosure
The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files. Found By:Shay Priel aka Prili site: http://www.myserverproject.net/ poc: ---- http://localhost/cgi-bin/post.mscgI I -...
MyServer HTTP server multiple security vulnerabilities
Crossite scripting with demo pages, script source code access with capital character in path...
MyServer 0.8.9 - Filename Parse Error Information Disclosure
source: https://www.securityfocus.com/bid/24571/info MyServer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. This issue affects MyServer 0.8.9; other versions may also be affected...
CVE-2007-2414
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...
Design/Logic Flaw
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...
CVE-2007-2414
MyServer before 0.8.8 allows remote attackers to cause a denial of service via unspecified vectors...