CVE-2004-2104
Novell NetWare Enterprise Web Server 5.1-6.0 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-2104. PoCs published by Rafel Ivgi The-Insider.
AI-analyzed exploit summary This is a vulnerability writeup describing multiple issues in Novell Netware Enterprise Web Server, including XSS, information disclosure, and file loading vulnerabilities. It references a specific endpoint (/servlet/SnoopServlet) but does not include functional exploit code.
Description
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.
Exploits (3)
This is a vulnerability writeup describing multiple issues in Novell Netware Enterprise Web Server, including XSS, information disclosure, and file loading vulnerabilities. It references a specific endpoint (/servlet/SnoopServlet) but does not include functional exploit code.
The provided text describes multiple vulnerabilities in Novell Netware Enterprise Web Server, including XSS, information disclosure, and file loading issues. It references a specific JSP file as an example but does not contain executable exploit code.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Novell Netware Enterprise Web Server by injecting a VBScript payload via a crafted URL. The vulnerability allows arbitrary script execution in the context of the victim's browser.