INN buffer overflow

The remote version of this INN InterNetNews server does not do proper bounds checking. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CAN-2005-3120 lynx buffer overflow

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2005-3120

Stack-based buffer overflow in the HTrjis function in Lynx 2.8.6 and earlier allows remote NNTP servers to execute arbitrary code via certain article headers containing Asian characters that cause Lynx to add extra escape ESC characters...

CVE-2004-2438

Cross-site scripting XSS vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the 1 Submit News, 2 Submit Link or 3 Submit Article field...

CVE-2004-2438

PHP-Fusion 4.01 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the Submit News, Submit Link, or Submit Article fields. The CVE-2004-2438 entry documents this XSS issue across multiple input points but provides limi...

CVE-2004-2261

Cross-site scripting XSS vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "login name/author" field in the 1 news submit or 2 article submit functions...

CVE-2004-2261

CVE-2004-2261 is an XSS vulnerability in the e107 content management system. The issue allows remote attackers to inject arbitrary script or HTML via the login name/author field in the News Submit or Article Submit functions. The connected sources confirm the vulnerability details but do not prov...

CVE-2005-2152

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article...

CVE-2005-2074

CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...

CVE-2005-2074

Cross-site scripting XSS vulnerability in PHP-Fusion 6.0.105 allows remote attackers to inject arbitrary web script or HTML via a news or article post, possibly involving the 1 newsbody, 2 articledescription, or 3 articlebody parameters to submit.php...

CVE-2005-2067

SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

PT-2005-3016 · Php Fusion · Php-Fusion

Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...

CVE-2005-2067

SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

CVE-2004-2040

Multiple cross-site scripting XSS vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the 1 LAN407 parameter to clockmenu.php, 2 "email article to a friend" field, 3 "submit news" field, or 4 avmsg parameter to usersettings.php...

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...

INN < 2.2.2 Crafted Article Handling Remote Overflow

The remote host is running INN InterNetNews. The remote version of this server does not do proper bounds checking. An attacker may exploit this issue to crash the remote service by overflowing some of the buffers by sending a maliciously formatted news article. C Tenable Network Security, Inc...

RHEL 2.1 : pan (RHSA-2003:312)

Updated Pan packages that close a denial of service vulnerability are now available. Pan is a Gnome/GTK+ newsreader. A bug in Pan versions prior to 0.13.4 can cause Pan to crash when parsing an article header containing a very long author email address. This bug causes a denial of service crash,...

Pan DoS

DoS on reading article with oversized header...

Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection

source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...