158 matches found
CVE-2009-0499
Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...
CVE-2009-0499
Cross-site request forgery CSRF vulnerability in the forum code in Moodle 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to delete unauthorized forum posts via a link or IMG tag to post.php...
CVE-2007-0499
PHP remote file inclusion vulnerability in config.php in Sangwan Kim phpIndexPage 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the envincpath parameter...
CVE-2004-0499
CVE-2004-0499 is rejected and not used; this entry does not represent an active vulnerability.
CVE-2006-0499
CVE-2006-0499 describes a cross-site scripting (XSS) vulnerability in the Rlink 1.0.0 module for phpBB, exploitable via the url parameter in rlink.php. The vulnerability allows remote attackers to inject arbitrary script/HTML. Affected component: Rlink 1.0.0 module for phpBB (rlink.php). Root cau...
CVE-2005-0499
The CVE-2005-0499 entry describes a vulnerability in the Gigafast router (also known as the CompUSA router) where the DNS proxy option, when enabled, allows remote attackers to cause a denial of service through malformed DNS queries. The available data does not specify affected firmware versions ...
CVE-2003-0499
CVE-2003-0499 affects Mantis 0.17.5 and earlier, where the database password is stored in cleartext in a world-readable configuration file. This permits local users to perform unauthorized database operations due to exposed credentials. Public sources in the connected documents confirm Debian DSA...
CVE-2002-0499
The dpath function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories...
CVE-2002-0499
The CVE relates to the Linux kernel vulnerability where the d_path function truncates long pathnames without error in Linux kernel versions 2.2.20 and earlier, and 2.4.18 and earlier. This behavior can cause local users to cause programs to operate on incorrect directories, potentially enabling i...
CVE-2001-0499
Oracle 8i TNS Listener (CVE-2001-0499) is affected by a stack/buffer overflow when processing an overly long ARGUMENTS string, enabling remote code execution as the listener's process user. Public materials in the connected docs show an exploit path (Metasploit module, exploit scripts) and refere...
CVE-2001-0499
Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...
Immunity Canvas: ORACLE8LISTENER_WIN32
Name| oracle8listenerwin32 ---|--- CVE| CVE-2001-0499 Exploit Pack| CANVAS Description| Oracle8i TNS Listener stack overflow Notes| References: http://otn.oracle.com/deploy/security/pdf/nainet8bof.pdf CVE Name: CVE-2001-0499 VENDOR: Oracle Repeatability: Single shot Date public: 27-06-2001 CERT...
CVE-2001-0499
Buffer overflow in Transparent Network Substrate TNS Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands 1 STATUS, 2 PING, 3 SERVICES, 4 TRCFILE, 5 SAVECONFIG, or 6 RELOAD...
CVE-2000-0499
BEA WebLogic 3.1.8–4.5.1 is affected. The default configuration allows a remote attacker to view the source code of a JSP program by requesting a URL that exposes the JSP extension in upper case. Root cause: default config enables exposing JSP source. Impact: confidentiality of JSP source could b...
CVE-1999-0499
CVE-1999-0499 describes exposure of NETBIOS share information in Windows NT by publishing it through SNMP registry keys. Connected sources (Red Hat advisory; Nessus LANMAN disclosures) confirm information disclosure via SNMP OIDs for LanMan services/shares/users, enabling an attacker to learn tar...