Niti Telecom Caravan Business Server 2.00-03D - Directory Traversal

Niti Telecom Caravan Business Server 2.00-03D - Directory Traversal source: https://www.securityfocus.com/bid/9555/info The showcode.asp script activated in Sampleshowcode.html may be vulnerable to a directory traversal issue. A remote attacker may view any files readable by the web server using...

Leif M. Wright Web Blog 1.1 - Remote Command Execution

Leif M. Wright Web Blog 1.1 - Remote Command Execution source: https://www.securityfocus.com/bid/9539/info Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server. This is due to insufficient...

Aprox Portal 3.0 - File Disclosure

source: https://www.securityfocus.com/bid/9540/info Aprox Portal is prone to a vulnerability that may permit remote attackers to gain access to files that are readable by the hosting web server. These files may exist outside of the server root. This could expose sensitive information that may be...

JBrowser 1.0/2.x - Unauthorized Admin Access

source: https://www.securityfocus.com/bid/9537/info Due to a lack of access validation to the 'admin' directory, malevolent users may be able to execute arbitrary admin scripts. This may allow a malicious user to upload arbitrary files to the affected system and gain access to files outside of th...

NETCam.txt

Application: NETCam webserver running NETCam Viewer 1.0.0.28 Vendor: http://www.aiptek.com/ Versions: = 1.0.0.28 Platforms: Windows/Unix Bug: Directory traversal bug Risk: High Exploitation: remote with browser Date: 14 Jan 2003 Author: Rafel Ivgi, The-Insider e-mail: [email protected] web:...

Compaq Web-Based Management Agent Remote Overflow DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. This flaw could be used to forbid managing machines. C Tenable Network Security, Inc. References: Message-ID: Date: Thu, 19 Jun 2003 00:05:14 +0200 CEST From:...

HotNews 0.x - hotnews-engine.inc.php3?config[header] Remote File Inclusion

HotNews 0.x - hotnews-engine.inc.php3?configheader Remote File Inclusion source: https://www.securityfocus.com/bid/9357/info HotNews is prone to multiple file include vulnerabilities. This will permit remote attackers to cause malicious PHP scripts from attacker-controlled servers to be included...

KnowledgeBuilder 2.02.13.0 - Remote File Inclusion

KnowledgeBuilder 2.02.13.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/9292/info KnowledgeBuilder is prone to a remote file include vulnerability. An attacker could exploit this to cause hostile PHP scripts to be included and executed from a remote server. This would occur i...

OnlineArts DailyDose 1.1 - dose.pl Remote Command Execution

OnlineArts DailyDose 1.1 - dose.pl Remote Command Execution source: https://www.securityfocus.com/bid/9000/info It has been reported that DailyDose may be prone to a remote command execution vulnerability due to insufficient sanitization of $temp variable in dose.pl script. An attacker may submit...

Hummingbird CyberDOCS error page discloses web server installation path

Overview Hummingbird CyberDOCS contains a vulnerability that could allow a remote attacker to learn the installation path of the web server. This information could be used to support further attacks. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document management...

Microsoft URLScan 2.5/RSA Security SecurID 5.0 - Configuration Enumeration

source: https://www.securityfocus.com/bid/8419/info A weakness has been discovered in Microsoft URLScan and RSA Security SecurID when used in conjunction on a web server. The problem is said to occur due to the order in which the products are placed within the global ISAPI filter list. When the...

SurgeLDAP 1.0 d - Full Path Disclosure

source: https://www.securityfocus.com/bid/8406/info SurgeLDAP is prone to a path disclosure vulnerability. It is possible to gain access to sensitive path information by issuing an HTTP GET request for an invalid resource. This issue exists in the web server component of SurgeLDAP...

atomicboard 0.6.2 - Directory Traversal

source: https://www.securityfocus.com/bid/8236/info It has been reported that attackers may be able to modify the 'location' variable passed to the index.php file to cause the Web server to return arbitrary files. This script is prone to a directory traversal vulnerability, allowing attackers to...

Asus AAM6000EV ADSL Router Wide Open

Asus have been notified but haven't even acknowledged yet alone mentioned a fix. If the inbuilt webserver is activated, anyone on the local network can get the full user/pass list from the router without any identification whatsoever by going to the ip address of the router and appending /userdat...

Super-M Son hServer URI Traversal Arbitrary File Access

Super-M Son hServer is vulnerable to a directory traversal. It enables a remote attacker to view any file on the computer with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11678; scriptversion"1.22";...

Zeus Web Server 4.x - Admin Interface VS_Diag.cgi Cross-Site Scripting

Zeus Web Server 4.x - Admin Interface VSDiag.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/7751/info The Zeus Web Server contains a web based administration interface that is vulnerable to cross site scripting attacks. Due to insufficient sanitization of user-supplied input, ...

Webfroot Shoutbox 2.32 - 'URI' File Disclosure

source: https://www.securityfocus.com/bid/7737/info Shoutbox is prone to directory traversal attacks. The vulnerability exists due to insufficient sanitization of user-supplied values to URI parameters. An attacker can exploit this vulnerability by manipulating the value of the affected 'conf' UR...

12Planet Chat Server Error Message Path Disclosure

The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...

MDG Web Server 4D GET Request Remote Overflow

It is possible to kill the web server by sending an oversized string of '' as an argument to a GET request. An attacker may exploit this vulnerability to make your web server crash continually or even execute arbitrary code on your system. C Tenable Network Security, Inc. include 'compat.inc' ;...

[NT] Twilight Utilities Denial of Service Vulnerability (TW-WebServer)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...