WebGlimpse 2.18.7 - 'DOC' Directory Traversal

source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to retrieve arbitrary files in th...

WebGlimpse 2.18.7 - DOC Directory Traversal

WebGlimpse 2.18.7 - DOC Directory Traversal source: https://www.securityfocus.com/bid/52651/info WebGlimpse is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal...

Cross-Site Scripting vulnerability in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Webglimpse. Данную уязвимость я обнаружил ещё в 2007 году, когда нашёл уязвимость на сайте Секретной Разведывательной Службы Великобритании MI6, SIS. XSS:...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting...

Cross-Site Scripting vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting уязвимостях в локальной поисковой системе Webglimpse. XSS IE: Уязвимости в webglimpse.cgi в параметрах case, whole, lines, errors, age, filter и wordspan...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

Cross-Site Scripting vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в локальной поисковой системе Webglimpse. XSS IE: Уязвимости в webglimpse.cgi в параметрах autosyntax и autonegate. http://site/webglimpse.cgi?ID=1&query=12345&autosyntax=22style3D22xss:expressionalertdocument.cook...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Webglimpse: crossite scripting. CimWebCenter: crossite scripting...

CVE-2005-4354

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4354

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter...

CVE-2005-4354

CVE-2005-4354 is a documented XSS vulnerability in Webglimpse 2.14.1 and earlier, exploitable via the query parameter on webglimpse.cgi. The connected documents do not provide explicit exploit details, affected versions beyond the stated range, or concrete remediation steps. The NVD entry notes a...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

CVE-2005-4328

Webglimpse 2.14.1 and earlier is affected by an XSS in webglimpse.cgi, exploitable via the ID parameter to inject arbitrary script/HTML. Remote attackers could exploit this to achieve script execution in the vulnerable web page. The description does not specify patched versions or remediation ste...

CVE-2005-4328

Cross-site scripting XSS vulnerability in webglimpse.cgi in Webglimpse 2.14.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the ID parameter...

Webglimpse XSS vuln.

Webglimpse XSS vuln. Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/webglimpse-xss-vuln.html vendor:http://webglimpse.net/ affected version:2.14.1 and prior Product Description: Webglimpse can index and search any collection of documents you choo...

WebGlimpse 2.x - Cross-Site Scripting

WebGlimpse 2.x - Cross-Site Scripting source: https://www.securityfocus.com/bid/15916/info WebGlimpse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

WebGlimpse 2.x - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15916/info WebGlimpse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

GlimpseHTTP 1.02.0 WebGlimpse 1.0 - Piped Command

GlimpseHTTP 1.02.0 WebGlimpse 1.0 - Piped Command source: https://www.securityfocus.com/bid/2026/info WebGlimpse and GlimpseHTTP are web indexing and search engine programs with some associated management scripts. GlimpseHTTP up to and including 2.0, and WebGlimpse prior to version 1.5, suffer fr...

GlimpseHTTP 1.0/2.0 / WebGlimpse 1.0 - Piped Command

source: https://www.securityfocus.com/bid/2026/info WebGlimpse and GlimpseHTTP are web indexing and search engine programs with some associated management scripts. GlimpseHTTP up to and including 2.0, and WebGlimpse prior to version 1.5, suffer from a common vulnerability involving the component...