5 matches found
CVE-2004-2282
DansGuardian prior to 2.7.7-2 is affected. The vulnerability allows remote attackers to bypass URL filters by using a ".." sequence in the request, exploiting the URL-filtering logic. The affected software is DansGuardian; no explicit exploit code or in‑the‑wild exploit details are provided in th...
CVE-2004-2283
DansGuardian is affected by CVE-2004-2283 (before 2.6.1-13). A crafted HTTP request can bypass URL filters by triggering a page to be added to the clean page cache, undermining filtering effectiveness. The description across connected sources confirms the core issue as a bypass via cache handling...
CVE-2003-1506
The CVE-2003-1506 entry describes a Cross-site scripting (XSS) vulnerability in the web interface component dansguardian.pl of Adelix CensorNet 3.0 through 3.2 . The flaw allows remote attackers to run arbitrary script as another user by injecting HTML/script into the DENIEDURL parameter. The aff...
CVE-2002-1599
CVE-2002-1599 affects DansGuardian prior to 2.4.5-1, where remote attackers can bypass content filtering rules using hex-encoded URLs. CVSS shows Network attack, Low complexity, No auth, with Partial impact to confidentiality, integrity, and availability (base score 7.5). No remediation details a...
CVE-2004-2065
CVE-2004-2065 concerns DansGuardian 2.8 and earlier, where remote attackers can bypass the extension filtering rule by using a hex-encoded extension or a filename containing a dot. The available connected documents confirm the affected product and the bypass method, describing the underlying caus...