Authorization Bypass

solr-core is vulnerable to authorization bypass. The vulnerability exists when using the default RuleBasedAuthorizationPlugin, which allows a node to proxy requests without the need for authorization...

CVE-2012-1301

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

Design/Logic Flaw

The FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their behalf via the "url" parameter...

CVE-2012-1301

The CVE-2012-1301 vulnerability affects Umbraco 4.7.0 where the FeedProxy.aspx script can be abused to proxy arbitrary requests via the url parameter, enabling an open-proxy condition. The root cause is improper handling of the url parameter in FeedProxy.aspx, allowing unauthenticated remote use ...

CVE-2016-0362

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-side request forgery SSRF attacks, and trigger network traffic to arbitrary intranet or Internet hosts, via a crafted proxy request to a web service...

Mozilla Foundation Security Advisory 2009-27

Mozilla Foundation Security Advisory 2009-27 Title: SSL tampering via non-200 responses to proxy CONNECT requests Impact: High Announced: June 11, 2009 Reporter: Shuo Chen, Ziqing Mao, Yi-Min Wang, Ming Zhang Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird 2.0.0.22...

PEAR::MDB2 information leak

Under some conditions it's possible to proxy requests to different objects, including local files...

CVE-2006-6422

Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; th...

CVE-2006-6422

Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; th...

CVE-2006-6422

The CVE concerns Agileco AgileBill 1.4.x and AgileVoice 1.4.x failing to properly handle certain proxy requests. This allows remote attackers to disable the application by submitting invalid license data via a form, potentially involving modules/core/license.inc.php. Affected components appear to...

CVE-2003-1286

The CVE-2003-1286 issue affects Sambar Server prior to 6.0 beta 6. An HTTP Proxy vulnerability arises when security.ini lacks a 127.0.0.1 proxydeny entry, allowing remote attackers to send proxy HTTP requests to the server’s administrative interface and external web servers by issuing a Connectio...

Proxy Accepts gopher:// Protocol Requests

Binary data 1590.prm...

CVE-2003-1286

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests...

BEA Weblogic server proxy library vulnerabilities

CORE SDI http://www.core-sdi.com Vulnerability Report For BEA Weblogic's Proxy Date Published: August 15, 2000 Advisory ID: CORE-081300 Bugtraq ID: 1570 CVE CAN: None currently assigned. Title: BEA Weblogic Multiple Buffer Overflow Vulnerabilities Class: Boundary Error Condition Buffer Overflow...