CVE-2006-5287

Multiple SQL injection vulnerabilities in sign.php in Xeobook 0.93 allow remote attackers to execute arbitrary SQL commands via 1 the User-Agent HTTP header, or the 2 gbentrytext, 3 gblocation, 4 gbfullname, or 5 gbsex parameters...

CVE-2006-5194

CVE-2006-5194 is a documented XSS flaw in net2ftp 0.93, specifically in index.php where the username parameter can be exploited to inject arbitrary script/HTML. The vulnerability is described with a CVSS base score of 4.3 (Medium) and a NETWORK attack vector with no authentication required, but o...

CVE-2006-3619

Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences...

[SECURITY] [DSA 889-1] New enigmail packages fix information disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 889-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2005 http://www.debian.org/security/faq -...

CVE-2005-3292

Multiple cross-site scripting XSS vulnerabilities in Xeobook 0.93 allow remote attackers to inject arbitrary web script or HTML via Javascript events in tages such as...

CVE-2005-3292

Affected software: Xeobook 0.93. Vulnerability: multiple cross-site scripting (XSS) vulnerabilities enabling remote attackers to inject arbitrary web script or HTML via Javascript events in tags such as . Impact: script execution in the victim’s browser; no exploit details are provided in the doc...

CVE-2004-0852

The CVE-2004-0852 issue is a buffer overflow in htget 0.93 that can allow remote code execution via a crafted URL. Public advisories (Debian DSA-611-1) describe the vulnerability in htget and provide a fixed package version (0.93-1.1woody1). The NVD entry lists CVSSv2 base metrics (AV:N/AC:L/Au:N...