404 not found vulnerabilities and exploits

(subscribe to this query)

KarjaSoft Sami HTTP Server 2.0.1 allows remote malicious users to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects.

Karjasoft Sami Http Server 2.0.1

2 EDB exploits

openITCOCKPIT prior to 3.7.1 has reflected XSS in the 404-not-found component.

It-novum Openitcockpit

1 EDB exploit

ICQ99 ICQ web server build 1701 with "Active Homepage" enabled generates allows remote malicious users to determine the existence of files on the server by comparing server responses when a file exists ("404 Forbidden") versus when a file does not exist ("...

Mirabilis Icq Web Front

Cross-site scripting (XSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote malicious users to inject arbitrary web script via a URL containing the script in the domain name portion, which is not properly cleansed in the default error ...

Microsoft Isa Server 2000

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and previous versions allows remote malicious users to insert arbitrary HTML into a "404 Not Found" response.

Nulllogic Null Httpd

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Vivvo CMS prior to 4.1.1 allows remote malicious users to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response.

Vivvo Vivvo Vivvo Vivvo 4.0.2 Vivvo Vivvo 4.0.1 Vivvo Vivvo 4.0.4 Vivvo Vivvo 4.0.3

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote malicious users to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.

Goahead Software Goahead Webserver 2.1.5 Goahead Software Goahead Webserver 2.1.3 Goahead Software Goahead Webserver 2.1.4 Goahead Software Goahead Webserver 2.1.1 Goahead Software Goahead Webserver 2.1.2

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Fastream NETFile Server 6.0.3.588 allows remote malicious users to inject arbitrary web script or HTML via the URL, which is displayed on a "404 Not Found" error page.

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Splunk 4.0 up to and including 4.1.2, when Internet Explorer is used, allows remote malicious users to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.

Splunk Splunk 4.0.8 Splunk Splunk 4.0.7 Splunk Splunk 4.1.2 Splunk Splunk 4.1.1 Splunk Splunk 4.0.10 Splunk Splunk 4.0.9 Splunk Splunk 4.0.2 Splunk Splunk 4.0.1 Splunk Splunk 4.0.6 Splunk Splunk 4.0.5 Splunk Splunk 4.1 Splunk Splunk 4.0 Splunk Splunk 4.0.11 Splunk Splunk 4.0.4 Splunk Splunk 4.0.3

Cross-site request forgery (CSRF) vulnerability in the All In One WP Security & Firewall plugin prior to 3.9.0 for WordPress allows remote malicious users to hijack the authentication of administrators for requests that delete logs of 404 (aka Not Found) HTTP status codes.

Tips And Tricks Hq All In One Wordpress Security And Firewall

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook