CVE-2016-4849: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COMgetCurrentURL function in 1 publichtml/layout/default/header.thtml, 2 publichtml/layout/bento/header.thtml, 3...

bozotic HTTP server Information Disclosure Vulnerability

This host is running bozotic HTTP server and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbbozotichttpserverinfodiscvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ bozotic HTTP server Information Disclosure Vulnerability Authors: Sooraj KS Copyright: Copyright c...

CVE-2005-2433: Undefined Security Weakness

PhpList allows remote attackers to obtain sensitive information via a direct request to 1 about.php, 2 connect.php, 3 domainstats.php or 4 usercheck.php in publichtml/lists/admin directory, 5 attributes.php, 6 dbcheck.php, 7 importcsv.php, 8 user.php, 9 usermgt.php, or 10 users.php in...

Reptile Web Server Reptile Web Server 20020105 - Denial of Service

Reptile Web Server Reptile Web Server 20020105 - Denial of Service source: https://www.securityfocus.com/bid/9482/info Reptile has been reported prone to a remote denial of service vulnerability. It has been reported that this issue exists because the affected server does not time out on incomple...