Through the Asp's invasion Webserver-vulnerability warning-the black bar safety net

Through the asp's invasion of the web server,steal the files to destroy the system, which solve the non-sensational... iis security issues 1. iis3/pws vulnerability I experimented, win98+pws running on ASP program, you'll be in the browser address bar within a decimal point of the ASP program wil...

Plesk Multiple Script locale_id Parameter Traversal Arbitrary File Access

The remote host is running Plesk, a control panel used to administer and manage websites. The version of Plesk installed on the remote host fails to sanitize user-supplied input to the 'localeid' parameter of the 'login.php3', 'loginup.php', and 'top.php3' scripts before using it to access files...

FD Script 1.3.x - 'FName' Information Disclosure

source: https://www.securityfocus.com/bid/22265/info FD Script is prone to an information-disclosure vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...

CVE-2006-6616

index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information...

CVE-2006-2115

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

Multiple Easy File Sharing Web server security vulnerabilities

File upload with absolute path, denial of service, crossite scripting...

MS05-0 3 9+lcx=within the web server-the vulnerabilities and early warning-the black bar safety net

Recently been in order to get the server and depressed. Their dishes! The last time get over two are download pcanywhere inside the cif file and then use the pcanywhere connection. See the evil of the original patchMS05-0 3 9××, and then learned. You immediately go to the Webshell inside the test...

PHPGreetz 0.99 - Remote File Inclusion

PHPGreetz 0.99 - Remote File Inclusion source: https://www.securityfocus.com/bid/15575/info phpGreetz is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrar...

MonkeyWeb POST with too much data

Your web server crashes when it receives a POST command with too much data. It may even be possible to make this web server execute arbitrary code with this attack. OpenVAS Vulnerability Test $Id: monkeywebtoobigpost.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: MonkeyWeb POST with too muc...

Athena Web Registration remote command execution flaw

The remote host is running Athena Web server. The remote version of this software is vulnerable to remote command execution flaw through the athenareg.php script. A malicious user could execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id: athenawebremotecmdexec.nasl 8023...

Shambala web server DoS

It was possible to kill the web server by sending a malicious request. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ezUpload 2.2 - 'index.php?path' Remote File Inclusion

source: https://www.securityfocus.com/bid/14534/info ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary server-side...

CVE-2002-1866

The CVE-2002-1866 issue affects Simple Web Server (SWS) versions 0.0.4 through 0.1.0. The underlying root cause is that the server does not close file descriptors for 404 error responses, which can lead to resource exhaustion (denial of service) when an attacker issues numerous requests for non-e...

web-app.org WebAPP Encoded Request .dat File Disclosure

According to its banner, the remote host is running a version of WebAPP that suffers from an unspecified file disclosure vulnerability. An attacker may be able to use this flaw to disclose the contents of 'dat' files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

All4WWW-HomePageCreator 1.0 - index.php Remote File Inclusion

All4WWW-HomePageCreator 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/13169/info All4WWW-Homepagecreator is affected by an arbitrary remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input befo...

MagicScripts E-Store Kit-2 PayPal Edition - Remote File Inclusion

source: https://www.securityfocus.com/bid/12910/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a remote file include vulnerability. Remote attackers could potentially exploit this issue to include a remote malicious PHP script. If the attacker is able to execute the remote script it...

[SA14579] Spinworks Application Server Web Server Denial of Service

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

RaidenHTTPD Crafted Request Arbitrary File Access

The remote host is running a version of RaidenHTTPD which is vulnerable to a remote directory traversal bug. An attacker exploiting this bug would be able to gain access to potentially confidential material outside of the web root. C Tenable Network Security, Inc. include"compat.inc"; if...

Eternal Lines Web Server 1.0 - Remote Denial of Service

Eternal Lines Web Server 1.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/12416/info Eternal Lines Web Server is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the web service handles 70 or more simultaneous...

Movable Type mt-load.cgi Privilege Escalation

The remote web server is hosting Movable Type with 'mt-load.cgi' installed. Failure to remove mt-load.cgi could enable someone else to create a weblog in your Movable Type installation, and possibly gain access to your data. %NASLMINLEVEL 70300 This script was written by Rich Walchuck rich.walchu...