CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Cross-site scripting XSS vulnerability in startform of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter...

CVE-2003-0615

Technical details for CVE-2003-0615 are not publicly available in the provided documents. Monitor for updates.

CVE-2002-0615

The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation"...

CVE-2001-0615

The CVE-2001-0615 entry describes a directory traversal in Faust Informatics Freestyle Chat server prior to 4.1 SR3. The flaw allows a remote attacker to read arbitrary files by sending a specially crafted URL that abuses variations of the dot-dot sequence (for example, ... or ....). The availabl...

CVE-2000-0615

LPRng 3.6.x improperly installs lpd as setuid root, which can allow local users to append lpd trace and logging messages to files...

CVE-2000-0615

CVE-2000-0615 : LPRng 3.6.x improperly installs lpd as setuid root, allowing local users to append lpd trace and logging messages to files. The connected documents confirm the vulnerability is a local privilege issue tied to the lpd binary running with root privileges. No explicit exploit details...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-2001-0615

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' dot dot attack such as '...' or '....'...

CVE-1999-0615

CVE-1999-0615 entry is rejected/not used; it does not represent an active vulnerability entry.