litespeedsource-disclose.txt

LiteSpeed Web Server Remote Source Code Disclosure Exploit\n"; else $out = "GET /".$argv2."\x00.txt HTTP/1.1\r\n"; $out .= "Host: ".$argv1."\r\n"; $out .= "Connection: Close\r\n\r\n"; fwrite$fp, $out; while !feof$fp $gelen = fgets$fp, 128; $dosya = strreplace"/","-",$argv2; $ac =...

CVE-2009-4535

The CVE affects the Mongoose Web Server (Cesanta Mongoose) ≤ 2.8.0. Affected component: the web server’s handling of URL paths; root cause is inadequate input sanitization, allowing a remote attacker to trigger a trailing slash request that discloses the server’s files (source code disclosure). I...

lighttpd 1.3.7 远程CGI脚本代码泄漏漏洞

No description provided by source...

Femitter HTTP Server 1.03 Source Disclosure

Femitter HTTP Server v1.03 Remote Source Disclosure Found By: DrIDE Tested On: Windows XPSP3 Download: www.acritum.com - Description - Acritum Femitter Web Server v1.03 is a Windows based HTTP server. This is the latest version of the application available. Femitter is vulnerable to remote...

Kolibri+ Web Server 2 Disclosure

Kolibri+ Web Server 2 Remote Arbitrary Source Code Disclosure aka: More fun with Kolibri+ 2 webserver Found By: DrIDE Tested On: Windows XPSP3 - Description - Kolibri+ 2 Web Server is a Windows based HTTP server. This is the latest version of the application available. This vulnerability is simil...

CVE-2007-6314

BarracudaDrive Web Server before 3.8 is vulnerable to information disclosure: remote attackers can read the source code of web scripts by manipulating the file name in the URL (e.g., adding a +, a dot, or %80). Affected product: BarracudaDrive Web Server. Root cause is improper URL handling allow...

CVE-2006-6569

form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the 1 do and 2 chem parameters with a "modfich" floap parameter...

CVE-2005-0453

The bufferurldecode function in Lighttpd 1.3.7 and earlier does not properly handle control characters, which allows remote attackers to obtain the source code for CGI and FastCGI scripts via a URL with a %00 null character after the file extension...

CVE-2003-0424

Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to obtain the source code for scripts by appending encoded space %20 or . %2e characters to an HTTP request for the script, e.g. viewbroadcast.cgi...