Foafgen 0.3 - 'redir.php' Local Source Disclosure

Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...

Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== Album Photo Sans Nom = 1.6 Remote Source Disclosure Vulnerability ================================================================== Title..: 7 php scripts File Inclusion...

Apache on Windows mod_alias URL Validation Canonicalization CGI Source Disclosure

The version of Apache for Windows running on the remote host can be tricked into disclosing the source of its CGI scripts because of a configuration issue. Specifically, if the CGI directory is located within the document root, then requests that alter the case of the directory name will bypass t...

ipswitchXSS.txt

WhatsUp is a tool from Ipswitch to monitor application and network, embedding a custom web server on port 8022. Description: This custom web server is prone to multiple flaws. -as authenticated user: src disclosure http://server:8022/NmConsole/Login.asp. there are many XSS flaws, as...

Ipswitch WhatsUp Professional multiple flaws

WhatsUp is a tool from Ipswitch to monitor application and network, embedding a custom web server on port 8022. Description: This custom web server is prone to multiple flaws. -as authenticated user: src disclosure http://server:8022/NmConsole/Login.asp. there are many XSS flaws, as...

[SA19325] Xeneo Web Server Script Source Disclosure Vulnerability

TITLE: Xeneo Web Server Script Source Disclosure Vulnerability SECUNIA ADVISORY ID: SA19325 VERIFY ADVISORY: http://secunia.com/advisories/19325/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Xeneo Web Server 2.x http://secunia.com/product/69...

NetworkActiv Web Server Crafted Filename Request Script Source Disclosure

The remote host is running NetworkActiv Web Server, a freeware web server for Windows. According to its banner, the installed version of NetworkActiv Web Server does not properly validate the extension of filenames before deciding how to serve them. By including a forward-slash character, a remot...

Orion Application Server Crafted Filename Extension JSP Script Source Disclosure

The remote host is running Orion Application Server, an application server running on a Java2 platform. According to its banner, the version of Orion installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue t...

lighttpd on Windows < 1.4.10a Crafted Filename Request Script Source Disclosure

According to its banner, the version of lighttpd running on the remote Windows host is prior to 1.4.10a. It is, therefore, affected by an information disclosure vulnerability due to a failure to properly validate filename extensions in URLs. A remote attacker can exploit this issue, via specially...

[Full-disclosure] Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability

====================================================================== Secunia Research 23/03/2006 - Orion Application Server JSP Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting

====================================================================== Secunia Research 13/03/2006 - Dwarf HTTP Server Source Disclosure and Cross-Site Scripting - ====================================================================== Table of Contents Affected...

DSquare Exploit Pack: D2SEC_LIGHTTPD2

Name| d2seclighttpd2 ---|--- CVE| CVE-2006-0814 Exploit Pack| D2ExploitPack Description| Lighttpd Script Source Disclosure Notes|...

RaidenHTTPd < 1.1.48 Crafted Request Script Source Disclosure

Binary data 3455.prm...

RaidenHTTPD Crafted Request Script Source Disclosure

The remote host is running RaidenHTTPD, a web server for Windows. According to its banner, the version of RaidenHTTPD installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose the source of scripts...

[SA19032] RaidenHTTPD Script Source Disclosure Vulnerability

TITLE: RaidenHTTPD Script Source Disclosure Vulnerability SECUNIA ADVISORY ID: SA19032 VERIFY ADVISORY: http://secunia.com/advisories/19032/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: RaidenHTTPD 1.x http://secunia.com/product/4614/...

Secunia Research: Lighttpd Script Source Disclosure Vulnerability

====================================================================== Secunia Research 01/03/2006 - Lighttpd Script Source Disclosure Vulnerability - ====================================================================== Table of Contents Affected...

Lighttpd < 1.4.10a Crafted Filename Request Source Disclosure

Binary data 3450.prm...

CVE-2006-0425

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors...

CVE-2006-0425

BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors...

Microsoft Internet Information Services (IIS) Source Fragment Disclosure

Microsoft IIS 4.0 and 5.0 can be made to disclose fragments of source code which should otherwise be inaccessible. This is done by appending +.htr to a request for a known .asp or .asa, .ini, etc file. SPDX-FileCopyrightText: 2001 Pedro Antonio Nieto Feijoo Some text descriptions might be excerpt...