Vulnerability Assessment & Network Security Forums



The comprehensive list of vulnerabilities in this category are updated on a daily basis.  There are currently 2,554 vulnerability test descriptions and summaries in the database.  Clicking on the name of the vulnerability below will bring up the specific details for each network security test along with recommendations for patching the vulnerability and related discussions.

Home >> Browse Vulnerability Assessment Database >> Web Servers

Vulnerability assessments available for:
Web-Servers


Vulnerability Name Vulnerability Description Network Security Threat Type
1) /iisadmin is world readable Checks for the presence of /iisadmin infos
2) /iisadmpwd/aexp2.htr Determines whether /iisadmpwd/aexp2.htr is present infos
3) /scripts directory browsable Is /scripts/ listable ? infos
4) /scripts/repost.asp Determines whether /scripts/repost.asp is present infos
5) Apache /server-info accessible Make a request like http://www.example.com/server-info infos
6) Apache /server-status accessible Makes a request like http://www.example.com/server-status infos
7) Apache 2.0.39 Win32 directory traversal Apache 2.0.39 Win32 directory traversal infos
8) Apache < 1.3.27 Checks for version of Apache infos
9) Apache < 1.3.28 Checks for version of Apache infos
10) Apache < 1.3.29 Checks for version of Apache infos
11) Apache < 2.0.43 Checks for version of Apache infos
12) Apache < 2.0.45 Checks for version of Apache mixed
13) Apache < 2.0.46 Checks for version of Apache mixed
14) Apache < 2.0.46 on OS/2 Checks for version of Apache infos
15) Apache < 2.0.47 Checks for version of Apache infos
16) Apache < 2.0.48 Checks for version of Apache infos
17) Apache < 2.0.51 Checks for version of Apache infos
18) Apache <= 1.3.33 htpasswd local overflow Checks for Apache <= 1.3.33 infos
19) Apache = 2.0.51 Checks for version of Apache infos
20) Apache Auth Module SQL Insertion Attack Checks for vulnerable Apache Auth modules infos
21) Apache Connection Blocking Denial of Service Checks for version of Apache infos
22) Apache Directory Listing Checks to see if Apache will provide a directory listing infos
23) Apache Error Log Escape Sequence Injection Checks for Apache Error Log Escape Sequence Injection Vulnerability infos
24) Apache mod_access rule bypass Checks for Apache mod_access Rule Bypass Vulnerability infos
25) Apache mod_include Privilege Escalation Checks for version of Apache infos
26) Apache mod_proxy content-length buffer overflow Checks for version of Apache infos
27) Apache mod_ssl denial of service Checks for version of Apache infos
28) Apache Remote Command Execution via .bat files Tests for presence of Apache Command Execution via .bat vulnerability attack
29) Apache Remote Username Enumeration Vulnerability Checks for the error codes returned by Apache when requesting a non-existant user name infos
30) Apache Tomcat Default Accounts Apache Tomcat Default Accounts attack
31) Apache Tomcat servlet/JSP container default files Checks for Apache Tomcat default files infos
32) Apache-SSL Client Certificate Forging Vulnerability Checks for version of Apache-SSL infos
33) Apache::ASP source.asp Checks for the presence of /site/eg/source.asp infos
34) Authentication bypassing in Lotus Domino Checks if Lotus Domino databases can be accessed by by-passing the required authentication infos
35) BadBlue invalid null byte vulnerability Read BadBlue protected configuration file attack
36) CERN HTTPD access control bypass Determines if web access control can be circumvented infos
37) CERN httpd CGI name heap overflow Ask for a too long CGI name containing a dot destructive_attack
38) CERN httpd problem Attempts to find the location of the remote web root infos
39) Check for bdir.htr files Check for existence of bdir.htr infos
40) Check for dangerous IIS default files Check for existence of viewcode.asp infos
41) Check for IIS .cnf file leakage Check for existence of world-readable .cnf files infos
42) Codebrws.asp Source Disclosure Vulnerability Tests for presence of Codebrws.asp infos
43) Compaq Web Management Server Determines of the remote web server is Compaq Web Management infos
44) Cross-Site Scripting in Cherokee Error Pages Checks for the version of Cherokee infos
45) Directory listing through WebDAV Checks the presence of WebDAV infos
46) Domino HTTP server exposes the set up of the filesystem obtains absolute path to cgi-bin infos
47) Domino traversal \..\..\file.txt attack
48) F5 BIP-IP Cookie Persistence F5 BIP-IP(R) Cookie Persistence infos
49) fpcount.exe overflow Is fpcount.exe installed ? infos
50) Frontpage Overflow (MS03-051) IIS Frontpage MS03-051 infos
51) GeoHttpServer Unauthorized Image Access Vulnerability Checks for unauthorized image access vulnerability in GeoHttpServer infos
52) Hidden WWW server name Tries to discover the web server name infos
53) htimage.exe overflow Is htimage.exe vulnerable to a buffer overflow ? denial
54) HyperText Transfer Protocol Information Determines the version of HTTP spoken by the remote host infos
55) IIS .HTR ISAPI filter applied Tests for IIS .htr ISAPI filter infos
56) IIS .IDA ISAPI filter applied Tests for IIS .ida ISAPI filter infos
57) IIS 5 .printer ISAPI filter applied Tests for IIS5 .printer ISAPI filter infos
58) IIS 5.0 Sample App reveals physical path of web root IIS 5.0 Sample App reveals physical path of web root infos
59) IIS : Directory listing through WebDAV Checks the presence of the Index Server service infos
60) IIS dangerous sample files Determines whether IIS samples files are installed infos
61) IIS perl.exe problem Attempts to find the location of the remote web root infos
62) IIS Remote Command Execution Determines if arbitrary commands can be executed infos
63) IIS Service Pack - 404 IIS Service Pack Check infos
64) IIS Unicode Remote Command Execution Determines if arbitrary commands can be executed thanks to IIS infos
65) IMail account hijack Checks for version of IMail web interface infos
66) iPlanet Directory Server traversal /\../\../\file.txt attack
67) iPlanet Search Engine File Viewing Attempts to read an arbitrary file using a feature in iPlanet attack
68) Ipswitch Imail WebCalendar Directory Traversal Vulnerability Ipswitch Imail WebCalendar Directory Traversal Vulnerability infos
69) JServ Cross Site Scripting Tests for JServ Cross Site Scripting attack
70) Lotus Domino administration databases Checks if Lotus Domino administration databases can be anonymously accessed infos
71) Lotus Domino Banner Information Disclosure Vulnerability Tests for Lotus Physical Path Disclosure Vulnerability infos
72) Lotus Domino Server Information Disclosure Vulnerabilities Checks for information disclosure vulnerabilities in Lotus Domino Server infos
73) Lotus Notes ?OpenServer Information Disclosure Lotus Notes ?OpenServer Information Disclosure infos
74) Malformed Hit-Highlighting Argument Vulnerability Determines IIS IDA/IDQ Path Reveal vulnerability infos
75) Microsoft .NET Custom Errors Not Set Checks for the error message of the .NET framework infos
76) Microsoft .NET Handlers Enumeration Checks for the version of the .NET framework infos
77) Microsoft .NET Version Information Disclosure Checks for the version of the .NET framework infos
78) Microsoft Frontpage 'authors' exploits Checks for the presence of Microsoft Frontpage extensions infos
79) Microsoft Frontpage dvwssr.dll backdoor Checks for the presence of /_vti_bin/_vti_aut/dvwssr.dll infos
80) Microsoft Frontpage exploits Checks for the presence of Microsoft Frontpage extensions infos
81) Microsoft IIS Cookie information disclosure Microsoft IIS Cookie information disclosure infos
82) Microsoft IIS UNC Mapped Virtual Host Vulnerability Checks IIS for .ASP/.HTR backslash vulnerability. infos
83) Microsoft's Index server reveals ASP source code Checks for a problem in webhits.dll infos
84) mod_frontpage installed Checks for the presence of mod_frontpage infos
85) mod_gzip format string attack mod_gzip detection mixed
86) mod_gzip running mod_gzip detection infos
87) mod_python handle abuse Checks for version of Python infos
88) mod_python malformed query Checks for version of Python infos
89) mod_ssl off by one Checks for version of mod_ssl infos
90) mod_ssl overflow Checks for version of mod_ssl infos
91) mod_survey ENV tags SQL injection mod_survey SQL injection infos
92) Netscape Administration Server admin password Reads admpw infos
93) Netscape FastTrack 'get' 'get / ' gives a directory listing infos
94) Netscape Server ?PageServices bug Make a request like http://www.example.com/?PageServices infos
95) Netscape Server ?wp bug Make a request like http://www.example.com/?wp-cs-dump infos
96) No 404 check Checks if the remote webserver issues 404 errors infos
97) nsiislog.dll DoS Determines the presence of nsiislog.dll denial
98) Passwordless frontpage installation Determines if the remote web server is password protected attack
99) RDS / MDAC Vulnerability (msadcs.dll) located Determines the presence of msadcs.dll infos
100) RDS / MDAC Vulnerability Content-Type overflow Determines the presence of msadcs.dll mixed
101) shtml.exe reveals full path Retrieve the real path using shtml.exe infos
102) VisualRoute Web Server Detection Extracts the banner of the remote visual route server infos
103) Web mirroring Performs a quick web mirror infos
104) Web Server reverse proxy bug Web Server reverse proxy bug infos
105) Web server traversal \..\..\file.txt attack
106) WebDAV Directories Enumeration Determines which directories are DAV enabled infos
107) Zope DocumentTemplate package problem Checks for Zope infos
108) Zope DoS Checks for Zope infos
109) Zope Image Updating Method Checks for Zope infos
110) Zope Installation Path Disclosure Checks for Zope installation directory attack
111) Zope Invalid Query Path Disclosure Checks for Zope Examples directory attack
112) Zope Multiple Vulnerabilities Checks Zope version infos
113) Zope ZClass Permission Mapping Bug Checks Zope version infos

SATA III (6Gbps) 2-port (Internal) PCI-Express RAID Controller Card
$28.0
SATA III (6Gbps) 2-port (Internal) PCI-Express RAID Controller Card    pictureDesktop PCI-E to SATA2.0 raid card PCIe to dual SATA + IDE 40pin adapter card
$20.0
Desktop PCI-E to SATA2.0 raid card PCIe to dual SATA + IDE 40pin  adapter card pictureRAIDON GR3660-B3 RAID Subsystem for 2x 3.5 inch SATA HDD
$196.27
RAIDON GR3660-B3 RAID Subsystem for 2x 3.5 inch SATA HDD pictureFibre Store Disc Array Storage Unit FS Raid, 5VDC, 2x6A DC Hard to Find, Bargain
$374.0
Fibre Store Disc Array Storage Unit FS Raid, 5VDC, 2x6A DC Hard to Find, Bargain picture