CVE-2008-0873

The CVE-2008-0873 entry describes a SQL injection in index.php of the jlmZone Classifieds module for XOOPS. The vulnerability is triggered through the cid parameter in an Adsview action, allowing remote attackers to execute arbitrary SQL commands. Affected software/component: XOOPS jlmZone Classi...

Debian Security Advisory DSA 079-2 (uucp)

The remote host is missing an update to uucp announced via advisory DSA 079-2. OpenVAS Vulnerability Test $Id: deb0792.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 079-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-0873

NABOpoll 1.1.2 is vulnerable to an authentication-bypass that lets remote attackers access certain administrative functionality by directly requesting admin URLs. Specifically, requesting (1) config_edit.php, (2) template_edit.php, or (3) survey_edit.php in the admin/ directory can bypass login c...

CVE-2006-0873

CVE-2006-0873 affects Coppermine Photo Gallery (docs/showdoc.php, f parameter). It is an absolute path traversal / local file inclusion vulnerability allowing arbitrary file inclusion, potentially from Windows UNC shares. Affected: Coppermine Photo Gallery 1.4.3 and earlier. Root cause: unsanitiz...

CVE-2005-0873

CVE-2005-0873 covers multiple XSS vulnerabilities in Oracle Reports Server 10g (9.0.4.3.3), specifically in test.jsp via the desname and repprod parameters. The NVD entry confirms remote, non-authenticated XSS with arbitrary script/HTML injection. Nessus plugin notes a remediation: disable access...

CVE-2004-0873

Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program...

CVE-2004-0873

Apple iChat AV 2.1, AV 2.0, and 1.0.1 are affected by a remote code-execution vulnerability where a crafted "link" referencing a program can cause arbitrary commands to run on the target. This is a network-type issue with low attack complexity, no authentication, and partial confidentiality/integ...

CVE-2004-0873

Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program...

Mac OS X iChat Link Handling Arbitrary Command Execution (Security Update 2004-09-16)

The remote host is missing Security Update 2004-09-16. This security update is for iChat. There is a bug in older versions of iChat where an attacker may execute commands on the local system by sending malformed links which will execute local commands to an iChat user on the remote host. C Tenabl...

CVE-2002-0873

The CVE-2002-0873 issue affects l2tpd versions around 0.67, where a long attribute/value could overflow and overwrite the vendor field, potentially via a buffer overflow. Additionally, the affected code paths may fail to initialize the random number generator, enabling some predictability in keys...

CVE-2001-0873

The CVE-2001-0873 issue affects Taylor UUCP’s uuxqt, where long command-line options are not properly filtered, enabling a local user to gain privileges by invoking uux with a malicious --config file. Public documents confirm the vulnerability primarily as a local-exploit in uuxqt, with Debian (u...

CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...

CVE-2002-0873

Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow...

CVE-2000-0873

Technical details about CVE-2000-0873 are not provided in the attached documents. No specifics on affected products, versions, or exploit information are present. Monitor for updates in the connected sources.

CVE-1999-0873

The issue CVE-1999-0873 affects the Skyfull mail server and is caused by a buffer overflow triggered via the MAIL FROM command. Public sources (NVD) describe a network-exploitable vulnerability with a low attack complexity and no required authentication, with partial impacts on confidentiality, i...