135 matches found
CVE-2006-0842
CVE-2006-0842 concerns Calacode @Mail 4.3 and is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary script/HTML via a modified javascript: string in the SRC attribute of an IMG element in an email message, as demonstrated by the payload “java script:.” This originat...
CVE-2005-0842
CVE-2005-0842 involves a cross-site scripting (XSS) vulnerability in Kayako eSupport version 2.3. The flaw occurs in index.php via the parameters _i and _c, allowing remote attackers to inject arbitrary web script or HTML in a victim’s browser. The public description does not specify a fix or aff...
CVE-2004-0842
The CVE-2004-0842 issue affects Internet Explorer 6.0 SP1 and earlier (Windows platforms) and is caused by an unchecked buffer in CSS parsing that can trigger heap memory corruption via crafted CSS (for example, the “@;/*”” sequence). Successful exploitation could lead to remote code execution or...
CVE-2002-0842
CVE-2002-0842 is a format-string vulnerability in Oracle’s mod_dav extension (used for logging gateway errors) that could enable remote code execution via a crafted destination URI triggering a 502 Bad Gateway. The vulnerability affects Oracle9i Application Server 9.0.2 (and related mod_dav code ...
CVE-2003-0842
Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...
CVE-2003-0842
CVE-2003-0842 describes a stack-based buffer overflow in mod_gzip_printf for mod_gzip 1.3.26.1a and earlier (and possibly later official versions) when running in debug mode. An attacker can trigger arbitrary code execution remotely by sending a GET request with a long filename and an Accept-Enco...
CVE-2003-0842
Stack-based buffer overflow in modgzipprintf for modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode, allows remote attackers to execute arbitrary code via a long filename in a GET request with an "Accept-Encoding: gzip" header...
CVE-2002-0841
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-0842. Reason: This candidate is a duplicate of CVE-2002-0842. The duplicate assignment was made before public disclosure. Notes: none...
CVE-2002-0842
Format string vulnerability in certain third party modifications to moddav for logging bad gateway messages e.g. Oracle9i Application Server 9.0.2 allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response, which causes the format string...
CVE-2001-0842
The CVE-2001-0842 entry describes a directory traversal in Search.cgi on Leoboard LB5000/LB5000II (versions up to 1029 and earlier). The vulnerability occurs via .. sequences in the amembernamecookie cookie, enabling remote attackers to overwrite files and gain privileges. Affected component: Sea...
CVE-2000-0842
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-2000-0842
CVE-2000-0842 affects the UnixWare 7 scohelphttp webserver. The vulnerability is in the search97cgi/vtopic component, where a path traversal via a .. (dot dot) attack could allow remote attackers to read arbitrary files. The available connected sources (NVD, CVE listings) confirm the affected pro...
CVE-2000-0842
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. dot dot attack...
CVE-1999-0842
CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...