133 matches found
Cross-site Scripting (XSS)
Python SimpleHTTPServer is vulnerable to cross-site scripting XSS. The listdirectory function in Lib/SimpleHTTPServer.py does not set a charset parameter in the Content-Type HTTP header, allowing an attacker to inject arbitrary Javascript through UTF-7 encoding into Internet Explorer 7 browser vi...
h-include (1.0.0), hinclude (>=1.0.1, <=1.1.0) +4 more potentially affected by CVE-2018-16478 via simplehttpserver (>=0.0.6, <=0.2.1)
simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-16478 Source advisory: OSV:GHSA-VWR2-WJ63-86GR...
GHSA-VWR2-WJ63-86GR Path Traversal in simplehttpserver
All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider using an...
Path Traversal in simplehttpserver
All versions of simplehttpserver are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. Recommendation No fix is currently available. Do not use simplehttpserver in production or consider using an...
simplehttpserver path traversal vulnerability (CNVD-2018-25186)
simplehttpserver is a Python based HTTP server for testing, development and debugging of projects. A path traversal vulnerability exists in simplehttpserver 0.2.1 and earlier versions. An attacker can use this vulnerability to list arbitrary files in other folders in the web root directory...
CVE-2018-16478
A Path Traversal in simplehttpserver versions =0.2.1 allows to list any file in another folder of web root...
CVE-2018-16478
A Path Traversal in simplehttpserver versions =0.2.1 allows to list any file in another folder of web root...
Path traversal
A Path Traversal in simplehttpserver versions =0.2.1 allows to list any file in another folder of web root...
CVE-2018-16478
CVE-2018-16478 affects the Python-like HTTP server module simplehttpserver , version ≤ 0.2.1. The root cause is a path traversal vulnerability that allows a URL to navigate via symlinks, enabling an attacker to list files outside the web root (information disclosure). Documented impact: informati...
CVE-2018-16478
A Path Traversal in simplehttpserver versions =0.2.1 allows to list any file in another folder of web root...
CVE-2018-16478: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal in simplehttpserver versions =0.2.1 allows to list any file in another folder of web root...
PT-2018-13600
Name of the Vulnerable Software and Affected Versions simplehttpserver versions =0.2.1 simplehttpserver versions all versions are affected Description The issue allows an attacker to access files outside the webroot due to a Path Traversal vulnerability. This is possible because the vulnerability...
Information Disclosure
simplehttpserver is vulnerable to information disclosure attacks. The vulnerability exists due to the ability to traverse documents out of the webroot through symlink...
h-include (1.0.0), hinclude (>=1.0.1, <=1.1.0) +3 more potentially affected by CVE-2018-3787 via simplehttpserver (>=0.0.6, <=0.1.1)
simplehttpserver NPM version =0.0.6, =1.0.1, =0.0.1, =0.0.2 Source cves: CVE-2018-3787 Source advisory: OSV:GHSA-GPVJ-Q7FP-JCCH...
GHSA-GPVJ-Q7FP-JCCH simplehttpserver allows directory traversal and file listing
Path traversal in simplehttpserver v0.2.1 allows listing any file on the server...
simplehttpserver allows directory traversal and file listing
Path traversal in simplehttpserver v0.2.1 allows listing any file on the server...
simplehttpserver Path Traversal Vulnerability
simplehttpserver is a Python based HTTP server for testing, development and debugging of projects. A path traversal vulnerability exists in versions of simplehttpserver prior to 0.2.1, which can be exploited by an attacker to list arbitrary files on the server...
Node.js third-party modules: List any file in the folder by using path traversal
I would like to report Path Traversal in simplehttpserver. It allows to list any file in another folder of web root. Module module name: simplehttpserver version: v0.2.1 npm page: https://www.npmjs.com/package/simplehttpserver Module Description 'simpehttpserver' is an simple imitation of python'...