81 matches found
CVE-2009-0679
Cross-site scripting XSS vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0679
Cross-site scripting XSS vulnerability in the Your Account module in RavenNuke 2.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-0679
Technical details (affected software, component, vectors, and impact) are not publicly available in the provided documents. Monitor for updates as new information may emerge.
CVE-2008-0679
CVE-2008-0679 describes a reflected XSS in BlogPHP 2.0's index.php via the search parameter. The vulnerability affects BlogPHP 2.0 and can allow injection of arbitrary script/HTML. The provided documents do not specify a patch or workaround; no exploitation status is given. Related entries (CVE-2...
CVE-2007-0679
CVE-2007-0679 describes a PHP remote file inclusion in lang/leslangues.php of Nicolas Grandjean’s PHPMyRing 4.1.3b and earlier. The vulnerability allows an attacker to cause the PHP interpreter to include a remote file by supplying a URL via the fichier parameter, enabling arbitrary PHP code exec...
CVE-2006-0679
PHP-Nuke 7.8 and earlier is vulnerable to a SQL injection in the Your_Account module (index.php) via the username field, enabling remote attackers to manipulate SQL queries. The vulnerability is demonstrated in the Your_Account workflow (e.g., new_user) where user input is not properly sanitized ...
CVE-2005-0679
CVE-2005-0679 describes a PHP remote file inclusion in the Tell A Friend Script. The vulnerability is in tell_a_friend.inc.php, where the script_root parameter can reference a URL on a remote server, allowing arbitrary PHP code execution. Affected versions include Tell A Friend Script 2.7 (before...
CVE-2004-0679
The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...
CVE-2004-0679
The IP cloaking feature cloak.c in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses...
CVE-2004-0679
CVE-2004-0679 concerns UnrealIRCd 3.2 (and possibly other versions) where the IP cloaking feature (cloak.c) uses a weak hashing scheme to hide IP addresses. This flaw could allow remote attackers to perform brute force attempts to reveal other users’ IP addresses. Multiple connected sources (NVD ...
CVE-2003-0679
CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...
CVE-2002-0679
CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...
CVE-2002-0679
Buffer overflow in Common Desktop Environment CDE ToolTalk RPC database server rpc.ttdbserverd allows remote attackers to execute arbitrary code via an argument to the TTCREATEFILE procedure...
CVE-2001-0679
A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server...
CVE-2001-0679
CVE-2001-0679 describes a buffer overflow in InterScan VirusWall 3.23 and 3.3 . A remote attacker can trigger arbitrary code execution by sending a long HELO command to the server. The connected records confirm the vulnerable component and the nature of the flaw, but do not provide versions beyon...
CVE-2000-0679
The CVE-2000-0679 issue affects the CVS 1.10.8 client, where the client trusts pathnames received from the CVS server. Root cause: pathname handling allows the server to influence file creation. Impact: potential to create arbitrary files on the client. No remediation details are provided in the ...
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
CVE-2000-0679
The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...
CVE-1999-0679
The CVE-1999-0679 issue affects the hybrid-6 IRC server (EFnet) and is caused by a buffer overflow in the m_invite option, enabling remote command execution. Multiple sources (Red Hat CVE entry, CVE/NVD records) corroborate that the vulnerability arises from a buffer overflow in the hybrid-6 serv...
CVE-1999-0679
Buffer overflow in hybrid-6 IRC server commonly used on EFnet allows remote attackers to execute commands via minvite invite option...