CVE-2009-3562

CVE-2009-3562 affects Xerver HTTP Server 4.32. The XSS vulnerability is triggered in the management interface when action=chooseDirectory and the currentPath parameter is not properly validated, allowing remote attackers to inject arbitrary scripts/HTML. Affected product: Xerver HTTP Server (core...

CVE-2009-3544

CVE-2009-3544 affects Xerver HTTP Server 4.32. A remote attacker can disclose the source of a web page by sending a crafted HTTP request with ::$DATA appended after the filename, leading to information disclosure. Multiple sources (NVD/OpenVAS/Seebug) confirm the vulnerability and its impact as s...

CVE-2009-3561: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Xerver HTTP Server 4.32 allows remote attackers to read arbitrary files via a full pathname with a drive letter in the currentPath parameter in a chooseDirectory action...

CVE-2009-3544: Exposure of Sensitive Information to an Unauthorized Actor

Xerver HTTP Server 4.32 allows remote attackers to obtain the source code for a web page via an HTTP request with the addition of ::$DATA after the HTML file name...

Xerver 4.32 Denial Of Service

Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to a remote denia...

Xerver HTTP Server <= v4.32 Remote Denial of Service

No description provided by source. Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver...

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability

Exploit for unknown platform in category remote exploits ================================================================ Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability ================================================================ Title: Xerver HTTP Server v4.32 XSS / Directo...

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability

No description provided by source. Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\ XSS Exploit :...

Xerver HTTP Server 4.32 - Cross-Site Scripting / Directory Traversal

Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:\ XSS Exploit :...

Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal

Xerver HTTP Server 4.32 - Cross-Site Scripting Directory Traversal Xerver HTTP Server v4.32 XSS / Directory Traversal Vulnerability By Stack Directory Traversal Exploit : http://127.0.0.1:32123/action=chooseDirectory&currentPath=d:%5C http://127.0.0.1:32123/action=chooseDirectory&currentPath=c:...

Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability

Exploit for unknown platform in category dos / poc ============================================================== Xerver HTTP Server 4.32 Remote Denial of Service Vulnerability ============================================================== Xerver HTTP Server = v4.32 Remote Denial of Service Found...

Xerver HTTP Server 4.32 - Remote Denial of Service

Xerver HTTP Server = v4.32 Remote Denial of Service Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to a remote denia...

Xerver HTTP Server 4.32 - Arbitrary Source Code Disclosure

Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...

Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln

Exploit for windows platform in category remote exploits ============================================================= Xerver HTTP Server 4.32 Arbitrary Source Code Disclosure Vuln ============================================================= Xerver HTTP Server v4.32 Remote Arbitrary Source Code...