CVE-2001-1018

Lotus Domino web server 5.08 allows remote attackers to determine the internal IP address of the server when NAT is enabled via a GET request that contains a long sequence of / slash characters...

3Com HomeConnect Cable Modem vulnerable to DoS via long string of characters

Overview Intruders can disrupt the normal operation of a 3Com HomeConnect Cable Modem. Description The 3Com HomeConnect Cable Modem contains a web server. This web server is used to administer the cable modem. By default, this web server is configured to allow any user local or remote to connect ...

ColdFusion Debug Mode Information Disclosure

It is possible to see the ColdFusion Debug Information by appending '?Mode=debug' at the end of the request. ColdFusion 4.5 and 5.0 are definitely concerned probably in addition older versions. The Debug Information usually contain sensitive data such as Template Path or Server Version...

CVE-2001-0680

Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST ls command...

CVE-1999-1416

AnswerBook2 AB2 web server dwhttpd 3.1a4 allows remote attackers to cause a denial of service resource exhaustion via an HTTP POST request with a large content-length...

Beck GmbH IPC@CHIP HTTPD vulernable to arbitrary file disclosure

Overview The Beck IPC@CHIP web server permits intruders to access files outside the web root. Description The Beck IPC@CHIP is a single chip embedded webserver. The Web Server's root directory is set to / by default. Because of this default setting, an attacker can download arbitrary files from a...

ShopPlus Cart

------------ advisory ------------ name: ShopPlus Cart Bug Information: The ShopPlus shopping cart system allows you to build a store or a mall on the Internet. Because of its flexibility, it allows you to sell virtually any product or services and fully customize the shopping experience of your...

Caucho Technologies Resin vulnerable to Cross-Site Scripting via passing of user input directly to default error page

Overview Web servers that use the Resin Java Servlet Container, versions 1.2.3 and earlier, are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on unvalidat...

webcgi98.txt

The following e-mail was sent to Acadsoft support about a week ago and I have yet recieved a response so I thought it was time to make it public. As I mentioned in the email I felt it was important because various universities use this as a registration utility. Hi, I was playing around with your...

Microsoft IIS 3.0/4.0/5.0 - PWS Escaped Characters Decoding Command Execution (4)

// source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, it automatically performs two actions before completing the request: 1. IIS...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (6)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 6 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (7)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 7 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution (3)

Microsoft IIS 3.04.05.0 - PWS Escaped Characters Decoding Command Execution 3 source: https://www.securityfocus.com/bid/2708/info Due to a flaw in the handling of CGI filename program requests, remote users can execute arbitrary commands on an IIS host. When IIS receives a CGI filename request, i...

Simpleserver WWW 1.0.x - AUX Directory Denial of Service

Simpleserver WWW 1.0.x - AUX Directory Denial of Service source: https://www.securityfocus.com/bid/2608/info Simpleserver:WWW is a freely available web server from AnalogX. Simpleserver:WWW is designed to provide an easy to use web server with a friendly interface. A problem with the web server...

Simpleserver WWW 1.0.x - AUX Directory Denial of Service

source: https://www.securityfocus.com/bid/2608/info Simpleserver:WWW is a freely available web server from AnalogX. Simpleserver:WWW is designed to provide an easy to use web server with a friendly interface. A problem with the web server could lead to a Denial of Service to legitimate users. By...

Michael Lamont Savant Web Server 3.0 - Denial of Service

source: https://www.securityfocus.com/bid/2468/info A denial of service condition exists in Michael Lamont Savant web server. Requesting a specially crafted URL composed of '%' characters could cause the server to stop responding. www.target/%%%...

WhitSoft SlimServe HTTPd 1.01.1 - Directory Traversal

WhitSoft SlimServe HTTPd 1.01.1 - Directory Traversal source: https://www.securityfocus.com/bid/14132/info SlimServe HTTP server is prone to directory traversal attacks due to improper sanitization of user input. This type of attack allows a malicious user to read files that exist outside of the...

WebReflex 1.55 HTTPd DoS

Introduction: WebReflex is an easy to use web server that's easy to set up and use. It has many features like a limitless amount of concurrent requests, Drive and directory lists, Built in server side image-maps, Implementation of the CGI-WIN standard, User defined directory index files, User...

Pi3Web tstisap.dll Long URL Overflow

The '/isapi/tstisapi.dll' cgi is installed. This CGI has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the http service. In addition, it discloses the physical path to the web root if an invalid URL is requested. %NASLMINLEVEL 70300 C Tenable Networ...

Vulnerability in SEDUM HTTP Server

Vulnerability in SEDUM HTTP Server Overview SEDUM HTTP Server v2.0 is a web server available from http://www.frassetto.it and http://www.zdnet.com. A vulnerability exists which allows a remote user to break out of the web root using relative paths ie: '..', '...'. Details http://localhost/../file...