110 matches found
Xerver HTTP Server 4.32 Disclosure
Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...
Xerver HTTP Server 4.32 - Arbitrary Source Code Disclosure
Xerver HTTP Server v4.32 Remote Arbitrary Source Code Disclosure Found By: DrIDE Download: http://www.javascript.nu/xerver Tested On: Windows XPSP3 - Description - Xerver v4.32 is a Windows based HTTP server. This is the latest version of the application available. Xerver v4.32 is vulnerable to...
CVE-2005-4774
Cross-site scripting XSS vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI...
CVE-2005-4774
The provided data identifies CVE-2005-4774 as a cross-site scripting (XSS) vulnerability in Xerver 4.17. The vulnerability allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI, potentially affecting users who view the modified URL. The initia...
CVE-2005-4774
Cross-site scripting XSS vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML after a /%00/ sequence at the end of the URI...
Xerver DoS Vulnerability (CVE-2002-0448) - Active Check
Xerver is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE = "cpe:/a:xerver:xerver";...
CVE-2005-3293
Xerver 4.17 allows remote attackers to 1 obtain source code of scripts via a request with a trailing "." dot or 2 list directory contents via a trailing null character...
CVE-2005-3293
CVE-2005-3293 affects Xerver before v4.20. Two information-disclosure vectors are described: (1) appending a trailing dot to a script URL to obtain its source code, and (2) sending a request with a trailing null character (%00) to list directory contents. Evidence from NVD/CVE records confirms vu...
CVE-2005-3293
Xerver 4.17 allows remote attackers to 1 obtain source code of scripts via a request with a trailing "." dot or 2 list directory contents via a trailing null character...
Xerver < 4.20 Multiple Vulnerabilities
Binary data 3263.prm...
Xerver < 4.20 Multiple Vulnerabilities
The remote host is running a version of Xerver prior to 4.20. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists that is triggered when a '.' is appended to the filename of a script in a URL. A remote attacker can exploit this to disclose the...
Xerver 4.17 Server - URI Null Character Cross-Site Scripting
Xerver 4.17 Server - URI Null Character Cross-Site Scripting source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a...
[SA17243] Xerver Multiple Vulnerabilities
TITLE: Xerver Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17243 VERIFY ADVISORY: http://secunia.com/advisories/17243/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: Xerver 4.x...
Xerver 4.17 Server - URI Null Character Cross-Site Scripting
source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...
Xerver 4.17 - Single Dot File Request Source Disclosure
Xerver 4.17 - Single Dot File Request Source Disclosure source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a...
Xerver 4.17 - Forced Directory Listing
source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...
Xerver 4.17 - Forced Directory Listing
Xerver 4.17 - Forced Directory Listing source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to...
Xerver 4.17 - Single Dot File Request Source Disclosure
source: https://www.securityfocus.com/bid/15135/info Xerver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit a vulnerability to disclose the contents of any Web accessible...