CVE-2007-0630

CVE-2007-0630 describes multiple SQL injection vulnerabilities in the generate_csv function of X-dev xNews 1.3 and earlier. The affected component is generate_csv in classes/class.news.php, with vulnerable parameters (id, from, q). The issue enables remote attackers to execute arbitrary SQL comma...

CVE-2006-0630

The CVE-2006-0630 issue affects RITLabs The Bat! before 3.0.0.15, where certain headers from encapsulated data in message/partial MIME messages are shown instead of the real headers, violating RFC2046 header merging. This enables remote attackers to spoof the email origin by sending a fragmented ...

CVE-2005-0630

CVE-2005-0630 affects PBLang 4.63, where an authenticated remote user can read arbitrary files by supplying a full pathname in the orig parameter of sendpm.php (directory traversal). The vulnerability is classified as low risk in NVD (CVSS v2 base score 2.1; LOCAL access, low complexity, partial ...

CVE-2005-0630

sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter...

CVE-2002-0630

The CVE-2002-0630 entry documents a vulnerability in the Telnet service of Polycom ViewStation, affected when running versions before 7.2.4. The issue allows remote attackers to cause a crash (denial of service) via long or malformed ICMP packets. No exploitation details or explicit remediation a...

CVE-2004-0630

CVE-2004-0630 affects Adobe Acrobat Reader on Unix/Linux (orig. 5.0.5/5.0.6, possibly earlier than 5.0.9). The vulnerability lies in the uudecode filename handling, where a filename containing shell metacharacters (backtick `) can allow remote code execution via the uudecode command. Multiple ven...

CVE-2004-0630

The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters "" or backtick in the filename of the PDF file that is provided to the uudecode...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0630

Multiple buffer overflows in the atari800.svgalib setuid program of the Atari 800 emulator atari800 before 1.2.2 allow local users to gain privileges via long command line arguments, as demonstrated with the -osarom argument...

CVE-2003-0630

CVE-2003-0630 affects the Atari 800 emulator (atari800), specifically the setuid program atari800.svgalib. Multiple buffer overflows in this component, present before version 1.2.2, allow local users to gain privileges via long command line arguments (demonstrated with -osa_rom). The issue is doc...

CVE-2001-0630

The CVE-2001-0630 entry documents a directory traversal vulnerability in MIMAnet's viewsrc.cgi version 2.0. The flaw allows a remote attacker to read arbitrary files by manipulating the loc parameter via a dot-dot (.. ) payload. No explicit patch or remediation is provided in the supplied documen...

CVE-2000-0630

Summary: IIS 4.0 and 5.0 can disclose fragments of source code by requesting a known file with a appended +.htr, via the ISAPI-based .HTR handling in IIS. What’s affected: Microsoft Internet Information Services (IIS) 4.0/5.0, specifically the mechanism that processes .HTR ISAPI scripts (ISM.DLL)...

CVE-1999-0630

CVE-1999-0630 concerns the NT Alerter and Messenger services in Windows. The connected documents confirm these services being active and capable of sending pop-up messages between NT users. The underlying issue is a social-engineering risk: an attacker who can persuade users to perform actions ma...

CVE-1999-0630

The NT Alerter and Messenger services are running...