13 matches found
WebWasher Classic 2.2/3.3 Error Message Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9039/info It has been reported that a cross-site scripting vulnerability may exist in WebWasher Classic that may allow remote attackers to execute HTML or script code in a user's browser. The issue is reported to occur du...
WebWasher Classic 2.2/2.3 HTTP CONNECT Unauthorized Access
No description provided by source. source: http://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3 (server mode) are affected by CVE-2005-0316: the product fails to drop CONNECT requests to localhost from external hosts, enabling remote bypass of access restrictions. Affected component is WebWasher Server mode proxy handling CONNECT to 127.0.0.1. Impact is descr...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...
WebWasher Classic - HTTP CONNECT weakness
WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...
WebWasherCONNECT.txt
WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...
CVE-2005-0316
WebWasher Classic 2.2.1 and 3.3, when running in server mode, does not properly drop CONNECT requests to the localhost from external systems, which could allow remote attackers to bypass intended access restrictions...
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access
WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with...
WebWasher Classic 2.2/2.3 - HTTP CONNECT Unauthorized Access
source: https://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with other attacks to exploit latent vulnerabilities. An attacker...
Webwasher Classic Error-Message XSS Vulnerability
Webwasher Classic Error-Message XSS Vulnerability ================================================= Description =========== WebWasher Classic is vulnerable to a XSS attack. If a HTTP GET-Request, containing script code, is sent to the proxy port default 8080/TCP, an error page is shown, which...
Webwasher Classic Error-Message XSS Vulnerability
Webwasher Classic Error-Message XSS Vulnerability ================================================= Description =========== WebWasher Classic is vulnerable to a XSS attack. If a HTTP GET-Request, containing script code, is sent to the proxy port default 8080/TCP, an error page is shown, which...
WebWasher Classic 2.2/3.3 - Error Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/9039/info It has been reported that a cross-site scripting vulnerability may exist in WebWasher Classic that may allow remote attackers to execute HTML or script code in a user's browser. The issue is reported to occur due to error messages returned to th...
WebWasher Classic 2.23.3 - Error Message Cross-Site Scripting
WebWasher Classic 2.23.3 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/9039/info It has been reported that a cross-site scripting vulnerability may exist in WebWasher Classic that may allow remote attackers to execute HTML or script code in a user's browser. The...