111 matches found
CVE-2003-0736
PhpWebSite 0.9.x and earlier contains multiple cross-site scripting (XSS) vulnerabilities in the Calendar, Fatcat, Pagemaster, and Site Search modules (and potentially other parameters). Exploitation could allow an attacker to execute arbitrary script in a user’s browser, potentially affecting gu...
CVE-2003-0736
Multiple cross-site scripting XSS vulnerabilities in phpWebSite 0.9.x and earlier allow remote attackers to execute arbitrary web script via 1 the day parameter in the calendar module, 2 the fatcatid parameter in the fatcat module, 3 the PAGEid parameter in the pagemaster module, 4 the PDAlimit...
CVE-2002-0736
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type authtype that is not blank...
CVE-2002-0736
Microsoft BackOffice 4.0/4.5, when configured for remote access, is vulnerable to authentication bypass via an HTTP request using a non-blank auth_type, allowing remote attackers to access administrative ASP pages. The provided documents describe the vulnerability and impact but do not include a ...
CVE-2002-0736
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type authtype that is not blank...
CVE-2001-0736
This CVE (CVE-2001-0736) affects the Pine email client (and pico editor) prior to version 4.33, where a local user can overwrite arbitrary files via a symlink attack. The vulnerability allows any local user to overwrite files owned by other users, including root, under certain conditions. A fix i...
CVE-2000-0736
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message...
CVE-2000-0736
Buffer overflow in Becky! Internet Mail client 1.26.04 and earlier allows remote attackers to cause a denial of service via a long Content-type: MIME header when the user forwards a message...
CVE-2000-0736
Becky! Internet Mail client up to version 1.26.04 is affected by a buffer overflow when processing a long Content-type: MIME header while forwarding messages, allowing remote denial of service. The vulnerability is triggered in the MIME header handling and results in partial availability impact. ...
CVE-1999-0736
The CVE-1999-0736 issue affects Microsoft Internet Information Services (IIS) 4.0 where the sample file showcode.asp enables directory traversal via a URL parameter, allowing a remote attacker to read arbitrary files outside the web root. The root cause is inadequate validation of the requested f...