78 matches found
CVE-2009-0680
creationtimestamp| type| source ---|---|--- 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8008...
CVE-2008-0680
CVE-2008-0680 affects the SNMP daemon (SNMPd) in MikroTik RouterOS 3.2 and earlier. The underlying issue allows remote attackers to cause a denial of service (daemon crash) by sending a crafted SNMP SET request. The connected records confirm the affected product/version and the observed impact, b...
CVE-2007-0680
PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0680
CVE-2007-0680 describes a PHP remote file inclusion in the file includes/functions.php of Phpbb Tweaked 3 and earlier . An attacker can supply a crafted URL to the parameter phpbb_root_path , causing the application to include remote PHP code and potentially execute arbitrary code on the server. ...
CVE-2006-0680
CVE-2006-0680 affects WebGUI prior to version 6.8.6-gamma, allowing remote attackers to create an account via a specific URL when anonymous registration is disabled. The provided documents confirm the affected software and the vulnerability condition; no explicit fix/version is stated within the ...
CVE-2005-0680
The CVE-2005-0680 issue affects Download Center Lite 1.6 and is a PHP remote file inclusion in the file download_center_lite.inc.php. The root cause is that the script_root parameter can be manipulated to reference a URL containing PHP code on a remote server, allowing an attacker to execute arbi...
CVE-2005-0680
PHP remote file inclusion vulnerability in downloadcenterlite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the scriptroot parameter to reference a URL on a remote web server that contains the code...
CVE-2004-0680
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...
CVE-2004-0680
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...
CVE-2004-0680
The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.
CVE-2003-0680
Unknown vulnerability in NFS for SGI IRIX 6.5.21 and earlier may allow an NFS client to bypass read-only restrictions...
CVE-2002-0680
Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / %5C in a .. dot dot sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228...
CVE-2001-0680
Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a "dot dot" attack in a LIST ls command...
CVE-2001-0680
Technical details specific to CVE-2001-0680 (affected product/version/root cause/patch) are not provided in the connected documents. Monitor for updates from trusted sources for any vendor-specific information or fixed disclosures.
CVE-2000-0680
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...
CVE-2000-0680
The CVE-2000-0680 entry concerns the CVS 1.10.8 server, where the server fails to restrict creation of arbitrary Checkin.prog or Update.prog programs. This allows remote CVS committers to modify or create Trojan horse programs named Checkin.prog or Update.prog and then perform a CVS commit action...
CVE-2000-0680
The CVS 1.10.8 server does not properly restrict users from creating arbitrary Checkin.prog or Update.prog programs, which allows remote CVS committers to modify or create Trojan horse programs with the Checkin.prog or Update.prog names, then performing a CVS commit action...