IT-Grundschutz M4.192: Konfiguration des Betriebssystems für einen Apache-Webserver (Windows)

IT-Grundschutz M4.192: Konfiguration des Betriebssystems für einen Apache-Webserver Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte...

IT-Grundschutz M4.195: Konfiguration der Zugriffssteuerung beim Apache-Webserver - Windows

IT-Grundschutz M4.195: Konfiguration der Zugriffssteuerung beim Apache-Webserver Windows. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte Beschreibung...

IT-Grundschutz M5.107: Verwendung von SSL im Apache-Webserver

IT-Grundschutz M5.107: Verwendung von SSL im Apache-Webserver. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte Beschreibung zu dieser Maßnahme findet...

CVE-2009-4496

Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...

Boa Webserver Terminal Escape Sequence in Logs Command Injection Vulnerability

Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Boa Webserver 0.94.14rc21 is vulnerable; other versions may also be affected. OpenVAS...

Boa Webserver Terminal Escape Sequence in Logs Command Injection Vulnerability

Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BOA Web Server 0.94.x - Terminal Escape Sequence in Logs Command Injection

BOA Web Server 0.94.x - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37718/info Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to...

BOA Web Server 0.94.x - Terminal Escape Sequence in Logs Command Injection

source: https://www.securityfocus.com/bid/37718/info Boa Webserver is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Boa Webserver 0.94.14rc21 is...

PHP mbstring.func_overload Webserver本地拒绝服务漏洞

BUGTRAQ ID: 33542 CVE ID: CVE-2009-0754 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 运行在Apache上的PHP允许本地用户通过修改.htaccess中的mbstring.funcoverload设置来修改同一Web服务器上所承载的其他站点的行为，将设置应用到同一服务器的其他虚拟主机，导致无法正确的处理多字节字符串。 PHP PHP 5.1.6 PHP PHP 4.4.4 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://snaps.php.net/...

Calendarix 0.7 - calpath Remote File Inclusion

Calendarix 0.7 - calpath Remote File Inclusion source: https://www.securityfocus.com/bid/37673/info Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containi...

Calendarix 0.7 - 'calpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/37673/info Calendarix is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/40577/info LineWeb is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple local file-include...

AproxEngine Multiple Remote Input Validation Vulnerabilities

AproxEngine is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, directory-traversal, and email- spoofing issues. Attackers can exploit these issues to execute arbitrary script code in the context of the webserver, compromise the application, obtain...

LineWeb 1.0.5 - Multiple Remote Vulnerabilities

LineWeb 1.0.5 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these...

httpdx webserver v1.5 Remote Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

LineWeb 1.0.5 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these issues to execute arbitrary local files within t...

Httpdx 1.5 Source Disclosure

Securitylab.ir Application Info: Name: httpdx webserver Version: 1.5 Vulnerability Info: Type: Remote Source Disclosure Risk: Medium Vulnerability: http://127.0.0.1/file.php%20 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

PHP File Uploader - Arbitrary File Upload

PHP File Uploader - Arbitrary File Upload source: https://www.securityfocus.com/bid/40159/info PHP File Uploader is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately limit the types of files that are uploaded. An attacker can exploit...

PHP File Uploader - Arbitrary File Upload

source: https://www.securityfocus.com/bid/40159/info PHP File Uploader is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately limit the types of files that are uploaded. An attacker can exploit this vulnerability to upload arbitrary code...

osCommerce 2.2 Arbitrary PHP Code Execution

$Id: oscommercefilemanager.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...