CVE-2010-0681

ZeusCMS 0.2 is affected by an access-control flaw that allows remote retrieval of sensitive data via a direct request to admin/backup.sql, due to information stored under the web root. This is documented in CVE-2010-0681 (CVSS v2 base score 5.0, Medium) with the impact described as partial confid...

CVE-2010-0681

creationtimestamp| type| source ---|---|--- 2010-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11437...

Sql injection

Multiple SQL injection vulnerabilities in index.php in PhpShop 0.8.1 allow remote attackers to execute arbitrary SQL commands via the 1 moduleid parameter in an admin/functionlist action, the 2 vendorid parameter in a vendor/vendorform action, the 3 moduleid parameter in an admin/moduleform actio...

CVE-2009-0681

PGP Desktop before 9.10 is affected by local DoS and code execution vulnerabilities in two IOCTL handlers. Specifically, pgpdisk.sys and pgpwded.sys fail to properly validate Irp/buffer data, allowing local attackers to crash the system or, for pgpwded.sys, crash or execute arbitrary code with SY...

CVE-2008-0681

CVE-2008-0681 affects PHPShop 0.8.1, where the index.php product_id parameter in the shop/flypage action is not properly sanitized, enabling SQL injection. A remote attacker could issue arbitrary queries to control the database, with exploit feasibility depending on php.ini setting: if magic_quot...

Debian: Security Advisory (DSA-384)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter to 1 comersuscustomerAuthenticateForm.asp or 2 comersusmessage.asp, different vectors than CVE-2004-0681...

CVE-2007-0681

profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...

CVE-2007-0681

CVE-2007-0681 affects ExtCalendar 2 and earlier. The vulnerability: profile.php lets remote attackers change arbitrary users’ passwords without the original password by submitting modified values to register.php, potentially enabling other unauthorized actions. Impact is noted as high/critical (C...

CVE-2006-0681

CVE-2006-0681 describes a format-string vulnerability in Power Daemon (powerd) 2.0.2 and earlier, located in powerd.c, where an attacker can cause remote code execution via format specifiers in the WHATIDO variable. Affected: Power Daemon up to version 2.0.2 and earlier. Impact: remote arbitrary ...

CVE-2005-0681

Nokia Symbian 60 allows remote attackers to cause a denial of service phone restart via a Bluetooth nickname...

HP-UX PHNE_29912 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)

s700800 11.22 sendmail1m 8.11.1 patch : A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHNE_30224 : HP-UX sendmail, Remote Unauthorized Privileged Access (HPSBUX00281 SSRT3631 rev.11)

s700800 11.04 VVOS sendmail1m 8.9.3 patch : A potential security vulnerability has been identified with HP-UX running sendmail, where the vulnerability could be exploited remotely to gain unauthorized privileged access. References: CERT/CC CA-2003-25, CAN-2003-0681. %NASLMINLEVEL 70300 C Tenable...

CVE-2004-0681

CVE-2004-0681 involves multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 5.09. The affected pages are comersus_customerAuthenticateForm.asp, comersus_backoffice_message.asp, comersus_supportError.asp, and comersus_message.asp. The underlying issue is non-sanitized input in the ...

CVE-2003-0681

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...

CVE-2003-0681

CVE-2003-0681 relates to a potential buffer overflow in Sendmail 8.12.x rule-set parsing when nonstandard rulesets (recipient, final, or mailer-specific envelope recipients) are used. Public documents indicate vulnerable Sendmail variants across platforms (notably HP-UX patches PHNE_35483/PHNE_35...

CVE-2003-0681

A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets 1 recipient 2, final, or 3 mailer-specific envelope recipients, has unknown consequences...

CVE-2002-0681

Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script...

CVE-2001-0681

Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long 1 username or 2 password...

CVE-2001-0681

CVE-2001-0681 describes a buffer overflow in ftpd of QPC QVT/Net 5.0 and QVT/Term 5.0 that allows a remote attacker to cause a denial of service by sending a long username or password. The available documents confirm the affected software and the underlying cause (buffer overflow) and the observe...