Bea Weblogic multiple bugs updated since 18.03.2003
Published:		18.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2666
Type:		remote
Level:		7/10
Description:		It's possible to download, upload and execute any file.

Affected:		BEA : WebLogic 6.0
		BEA : WebLogic 6.1
		BEA : Weblogic 7.0

Original document		Caleb Sima, SPI ADVISORY: Remote Administration of BEA WebLogic Server and Express (18.03.2003)
		Lluis Mora, S21SEC-011 - Multiple vulnerabilities in BEA WebLogic Server (18.03.2003)

Discuss:

Read or add your comments to this news (0 comments)

CGI bugs updated since 18.03.2003
Published:		20.03.2003
Source:		BUGTRAQ
SecurityVulns ID:		2667
Type:		remote
Level:		5/10

Affected:		PHPNUKE : PHP-Nuke 6.0
		MAMBO : Mambo Site Server 4.0
		NUKEDCLAN : Nuked-Klan 1.3
		MYABRACADAWEB : MyABraCaDaWeb 1.0
		PHPNUKE : PHP-Nuke 5.5
		NARA : Kebi Academy 2001
		SIPS : SIPS 0.2
		EZ : ezPublish 2.2
		DCPPORTAL : DCP-Portal 5.3
		SITEFRAME : Siteframe 2.2
		BASITONLINE : Basit cms 1.0
		2YD : WF-Chat 1.0
		XOOPS : xoops 2.0

Original document		Daniel Alcántara de la Hoz, [IPS] osCommerce multiple XSS vulnerabilities (20.03.2003)
		Gregory Le Bras | Security Corporation, [SCSA-011] Path Disclosure Vulnerability in XOOPS (20.03.2003)
		subj, WF-Chat (19.03.2003)
		Ertan Kurt, Some XSS vulns (19.03.2003)
		subj, PHP Message Board/Guestbook (19.03.2003)
		subj, SIPS (PHP) (19.03.2003)
		dong-h0un U, [INetCop Security Advisory #2002-0x82-013] Kebi Academy 2001 Web Solution Directory Traversing Vulnerability. (18.03.2003)
		Rynho Zeros Web, PHP-Nuke 5.5 and 6.0: Path Disclosure (18.03.2003)
		Gregory Le Bras | Security Corporation, [SCSA-010] Path Disclosure & Cross Site Scripting Vulnerability in MyABraCaDaWeb (18.03.2003)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft IIS WebDav buffer overflow updated since 18.03.2003
Published:		02.06.2003
Source:		CERT
SecurityVulns ID:		2665
Type:		remote
Level:		8/10
Description:		Buffer overflow in path conversion routine.

Affected:

MICROSOFT : Internet Information Server 5.0

Original document		nesumin, [Windows XP] ntdll.dll Buffer Overflow Vulnerability - Yet Another MS03-007 (02.06.2003)
		CERT, CERT Advisory CA-2003-09 Buffer Overflow in Microsoft IIS 5.0 (18.03.2003)
		X-FORCE, ISS Security Brief: Microsoft IIS WebDAV Remote Compromise Vulnerability (18.03.2003)

Files:		exploit for ntdll.dll through WebDAV (compiled, not validated)
		WebDAV exploit: using wide character decoder scheme
		IIS WebDav vulnerability testing tool
		exploit for ntdll.dll through WebDAV
		IIS 5.0 WebDAV -Proof of concept
		IIS Web DAV exploit new release
		IIS 5.0 WebDAV Exploit versi Xnuxer Lab
Discuss:		Read or add your comments to this news (0 comments)