78 matches found
CVE-2009-0571
The CVE-2009-0571 entry affects Ninja Designs Mailist 3.0. The admin.php component stores backup copies of maillist.php under the web root with insufficient access control, allowing remote attackers to obtain sensitive information via a direct request to the backup directory. The provided documen...
CVE-2009-0571
creationtimestamp| type| source ---|---|--- 2009-02-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8001...
CVE-2008-0571
The vulnerability CVE-2008-0571 affects the Drupal Userpoints module. Affected versions are Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3. The issue arises because the point moderation form does not follow Drupal’s Forms API submission model, enabling cross-si...
Solaris 10 (sparc) : 125332-24 (deprecated)
JDS 3: Macromedia Flash Player Plugin Patch. Date this patch was last updated by Sun : May/21/12 This plugin has been deprecated and either replaced with individual 125332 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...
CVE-2007-0571
CVE-2007-0571 affects phpMyReports 3.0.11 and earlier, enabling PHP remote code execution via a crafted URL in the cfgPathModule parameter of include/lib/lib_head.php. The root cause is a remote file inclusion vulnerability in PHP. Public references list the vulnerability and exploits; the entry ...
EV0061.txt
New eVuln Advisory: phpstatus Authentication Bypass http://evuln.com/vulns/61/summary.html --------------------Summary---------------- eVuln ID: EV0061 CVE: CVE-2006-0570 CVE-2006-0571 CVE-2006-0572 Vendor: Hinton Design Vendor's Web Site: http://www.hintondesign.org Software: phpstatus Sowtware'...
CVE-2006-0571
Multiple cross-site scripting XSS vulnerabilities in phpstatus 1.0 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in the administrative interface...
CVE-2005-0571
PunBB 1.2.1 contains an information-disclosure flaw in admin_loader.php: the plugin parameter allows remote attackers to read arbitrary files. This is a file-read vulnerability (no user authentication required) with a CVSS base score of 5.0 (medium) per NVD, indicating network-remote access and l...
CVE-2005-0571
adminloader.php in PunBB 1.2.1 allows remote attackers to read arbitrary files via the plugin parameter...
CVE-2004-0571
CVE-2004-0571 describes a remote code execution vulnerability in the Word for Windows 6.0 Converter used by WordPad. A crafted Word 6.0 document could trigger an unchecked data length/buffer handling in the converter, enabling an attacker to execute arbitrary code on a vulnerable system when the ...
CVE-2002-0571
Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax...
CVE-2001-0571
Directory traversal vulnerability in the web server for 1 Elron Internet Manager IM Message Inspector and 2 Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. dot dot in the requested URL...
CVE-2001-0571
The CVE-2001-0571 entry describes a directory traversal vulnerability in the web server component used by (1) Elron Internet Manager Message Inspector and (2) Anti-Virus prior to 3.0.4. The flaw allows remote attackers to read arbitrary files by supplying a ... sequence in the requested URL. Affe...
CVE-2000-0571
CVE-2000-0571 relates to a vulnerability in the LocalWEB HTTP server (v1.2.0) where a long GET request can trigger a denial of service. Connected scans reference a broader “WWW Too Long URL” DoS issue and describe the underlying risk as a buffer/URL length handling flaw that can crash the remote ...
CVE-2000-0571
LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request...
CVE-2000-0571
LocalWEB HTTP server 1.2.0 allows remote attackers to cause a denial of service via a long GET request...
CVE-1999-0571
CVE-1999-0571 describes a router configuration service or management interface (e.g., web server or Telnet) that is configured to allow connections from arbitrary hosts. Connected sources document ZyXEL/ZyXEL Router vulnerabilities involving default credentials or default passwords (Telnet/HTTP) ...