92 matches found
CVE-2004-0615
CVE-2004-0615 describes a cross-site scripting (XSS) vulnerability in D-Link DI-614+ (firmware 2.30), DI-704 (firmware 2.60B2), and DI-624 routers, exploitable by injecting arbitrary script/HTML via the DHCP HOSTNAME option in a DHCP request. Connected PT-2004-1707 details confirm the affected mo...
CVE-2003-0615
Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...
CVE-2003-0615
Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...
CVE-2003-0615
Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.
CVE-2003-0615
Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...
CVE-2002-0615
The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation"...
CVE-2000-0615
LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...
CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...
CVE-2001-0615
The CVE-2001-0615 entry describes a directory traversal in Faust Informatics Freestyle Chat server prior to 4.1 SR3. The flaw allows a remote attacker to read arbitrary files by sending a specially crafted URL that abuses variations of the dot-dot sequence (for example, ... or ....). The availabl...
CVE-2000-0615
CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...
CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...