PAFileDB Multiple Script Error Message Path Disclosure

There is a flaw in the remote version of paFileDB that may let an attacker obtain the physical path of the remote installation by sending a malformed request to one of the scripts 'admins.php', 'category.php', or 'team.php'. This information may help an attacker make more focused attacks against...

technote.pl

Technote Inc. from Korea Command Excution Spawn bash style Shell with webserver uid This Script is currently under development use strict; use IO::Socket; my $host; my $port; my $command; my $url; my $pdf; my $url1; my $number; my $url2; my $shiz; my @results; my $probe; my @U; $U1 =...

HTTP Header Name Remote Format String

The remote web server seems to be vulnerable to a remote format string attack based on the way it responds to a request containing a header whose name includes a format string. An anonymous attacker may be able to leverage this flaw to make the affected service crash or to execute arbitrary code ...

CVE-2004-1691

The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service CPU consumption and crash via a large amount of data...

Keene Digital Media Server Multiple Script XSS

The remote host runs Keene digital media server, a web server used to share digital information. This version is vulnerable to multiple cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Drinsane include'deprecatednasllevel.inc'; include'compat.inc';...

Xedus Webserver Connection Saturation DoS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to a denial of service. An attacker could stop the web server from accepting user requests by establishing multiple connections from the same host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Gallery save_photos.php Arbitrary Command Execution

The version of Gallery hosted on the remote web server is affected by an arbitrary command execution vulnerability. This could allow an attacker to execute arbitrary commands on the remote host by uploading a file containing arbitrary PHP code. When the temp directory is web accessible, the...

Sympa New List Creation Description Field XSS

According to its version number, the installation of Sympa on the remote host contains an HTML injection vulnerability that may allow a user who has the privileges to create a new list to inject HTML tags in the list description field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. based on...

Pete Stein GoScript 2.0 - Remote Command Execution

source: https://www.securityfocus.com/bid/10853/info Pete Stein GoScript is prone to a remote command execution vulnerability. This may allow remote attackers to perform unauthorized actions on a victim computer in the context of the hosting Web server. http://www.example.com/go.cgi?|id|...

Tivoli Directory Server ldacgi.exe Template Parameter Traversal Arbitrary File Access

The remote host is running IBM Tivoli's Directory Server, a lightweight LDAP server with a web frontend. There is a directory traversal issue in the web frontend of this program, specifically in the 'ldacgi.exe' CGI. An attacker may exploit this flaw to read arbitrary files on the remote system...

U.S. Robotics USR808054 Wireless Access Point - Web Administration Denial of Service

source: https://www.securityfocus.com/bid/10840/info The USR808054 wireless access point is reported to contain a denial of service vulnerability in its embedded web server. When malicious requests are received by the device, it will reportedly crash, denying service to legitimate users of the...

SUSE-SA:2003:005: susehelp

The remote host is missing the patch for the advisory SUSE-SA:2003:005 susehelp. During a code review of the susehelp package the SUSE Security Team recognized that the security checks done by the susehelp CGI scripts are insufficient. Remote attackers can insert certain characters in CGI queries...

NetChat HTTP Server Stack Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NetChat HTTP Server Stack Overflow RELEASE DATE: May 16, 2004 DATE REPORTED: May 12, 2004 RISK: Medium IMPACT: Attackers may be able to execute arbitrary code with the privileges of the user running the applicaton. VERSIONS: = 7.3 OVERVIEW: NetChat is...

DiGi WWW Server 1 - Remote Denial of Service

DiGi WWW Server 1 - Remote Denial of Service source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will...

DiGi WWW Server 1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/10228/info The DiGi WWW Server has been reported to contain a remote denial of service vulnerability. It has been reported that when the server receives a malformed HTTP GET request, the web server process will consume large amounts of CPU resources. Sinc...

Web Server HTTP Basic Authorization Header Remote Overflow DoS

It was possible to kill the web server by sending a request with a long basic authentication field. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. Affected: Monit include"compat.inc"; if...

Aborior Encore WebForum display.cgi file Parameter Command Execution

The remote host is running the Aborior Web Forum. There is a flaw in this version that could allow an attacker to execute arbitrary commands on this server with the privileges of the affected web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Aborior Encore Web Forum - Arbitrary Command Execution

source: https://www.securityfocus.com/bid/10040/info Encore Web Forum is reported prone to an issue that may allow a remote user to execute arbitrary commands on a system implementing the forum software. This issue is due to the application's failure to properly validate user-supplied URI input. ...

Apache 2.0.x < 2.0.49 mod_ssl Plain HTTP Request DoS

The remote host appears to be running a version of Apache 2.0.x prior to 2.0.49. It is, therefore, affected by a denial of service vulnerability in the 'modssl' module. An attacker can exploit this to deny service to the Apache server. C Tenable Network Security, Inc. include"compat.inc"; if...

InnoMedia VideoPhone Authorization Bypass

Application: InnoMedia VideoPhone Server: GoAhead-Webs Vendors: InnoMedia Pte Ltd GoAhead Ltd http://www.innomedia.com/ http://www.goahead.com/ Versions: au75200xvi04010x Platforms: Windows Bug: Authorization Bypass Risk: High Exploitation: remote with browser Date: 25 Dec 2003 Author: Rafel Ivgi...