JVN#90438169 RaidenHTTPD cross-site scripting vulnerability

RaidenHTTPD is a multipurpose web server for Windows provided by TEAM JOHNLONG. RaidenHTTPD contains a cross-site scripting vulnerability. Impact Arbitrary code could be executed on the user's web browser. Solution Update the Software Apply the update provided by the vendor. For more information,...

RaidenHTTPD check.php远程文件包含漏洞

RaidenHTTPD Server是Windows 98/Me/2000/XP/2003平台上具有完全特性的Web server软件，用户可以方便的使用和安装。 RaidenHTTPD自带的脚本在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 RaidenHTTPD的raidenhttpd-admin/slice/check.php脚本没有正确验证SoftParserFileXml参数的输入，允许攻击者通过包含本地或外部资源的文件执行任意PHP代码。成功攻击要求启用了WebAdmin功能。 RaidenHTTPD Server 1.1....

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork:...

CVE-2006-4723

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

CVE-2006-4723

CVE-2006-4723 affects RaidenHTTPD 1.1.49 and is a PHP remote file inclusion in raidenhttpd-admin/slice/check.php when register_globals and WebAdmin are enabled. The underlying issue is that input to the SoftParserFileXml parameter is not sanitized before being used to include PHP code, enabling a...

RaidenHTTPD SoftParserFileXml Parameter Remote File Inclusion

Binary data 3740.prm...

CVE-2006-4723: Undefined Security Weakness

PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when registerglobals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter...

RaidenHTTPD check.php SoftParserFileXml Parameter Remote File Inclusion

The remote host is running RaidenHTTPD, a web server for Windows. The version of RaidenHTTPD on the remote host fails to sanitize user-supplied input to the 'SoftParserFileXml' of the '/raidenhttpd-admin/slice/check.php' script before using it to include PHP code. An unauthenticated attacker may ...

RaidenHTTPD 1.1.49 - 'SoftParserFileXml' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: Powered.by.RaidenHTTPD +intitle:index.of |...

RaidenHTTPD 1.1.49 (SoftParserFileXml) Remote Code Execution Expl

Exploit for unknown platform in category remote exploits ==================================================================== RaidenHTTPD 1.1.49 SoftParserFileXml Remote Code Execution Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=on...

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution

RaidenHTTPD 1.1.49 - SoftParserFileXml Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- RaidenHTTPD/1.1.49 remote commands execution exploit by rgod [email protected] site:...

Code injection

RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving 1 "." dot, 2 space, and 3 "/" slash characters...

CVE-2006-0949

RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving 1 "." dot, 2 space, and 3 "/" slash characters...

CVE-2006-0949

RaidenHTTPD 1.1.47 is vulnerable to information disclosure via crafted requests containing dot, space, and slash characters that allow remote attackers to obtain source code of script files (e.g., PHP). The underlying issue is inadequate validation of URL filename extensions. A fix is to upgrade ...

CVE-2006-0949

RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving 1 "." dot, 2 space, and 3 "/" slash characters...

RaidenHTTPd < 1.1.48 Crafted Request Script Source Disclosure

Binary data 3455.prm...

RaidenHTTPD Crafted Request Script Source Disclosure

The remote host is running RaidenHTTPD, a web server for Windows. According to its banner, the version of RaidenHTTPD installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose the source of scripts...

CVE-2006-0949: Undefined Security Weakness

RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving 1 "." dot, 2 space, and 3 "/" slash characters...

[SA19032] RaidenHTTPD Script Source Disclosure Vulnerability

TITLE: RaidenHTTPD Script Source Disclosure Vulnerability SECUNIA ADVISORY ID: SA19032 VERIFY ADVISORY: http://secunia.com/advisories/19032/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: RaidenHTTPD 1.x http://secunia.com/product/4614/...

RaidenHTTPD directory traversal

The remote host is running a version of RaidenHTTPD which is vulnerable to a remote directory traversal bug. An attacker exploiting this bug would be able to gain access to potentially confidential material outside of the web root. OpenVAS Vulnerability Test $Id: raidenHTTPDdirtraversal.nasl 6063...