71 matches found
CVE-2006-0936
The CVE-2006-0936 entry concerns Free Host Shop Website Generator 3.3. It describes a vulnerability where remote authenticated users with administrative privileges can upload and execute arbitrary files via a formname parameter using a filename containing a dangerous extension and a trailing %00....
CVE-2005-0936
CVE-2005-0936 describes a cross-site scripting vulnerability in the PayPal Storefront component, specifically in the file products1h.php, where the id parameter can be abused to inject arbitrary web script or HTML. Affected software is indicated as ESMI PayPal Storefront; the vulnerability is cat...
CVE-2004-0936
CVE-2004-0936 refers to a ZIP header manipulation vulnerability affecting anti-virus engines (notably RAV) where both local and global ZIP headers can be set to zero, allowing a compressed file to bypass protection and still be opened. The connected sources describe a proof-of-concept and public ...
CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system...
CVE-2003-0936
Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe...
CVE-2003-0936
Symantec PCAnywhere 10.x and 11 are affected when running as a Windows service. The vulnerability lies in the GUI help interface, which can be manipulated via AWHOST32.exe to give a non-privileged user SYSTEM privileges on the local host. Exploitation is local and tied to service-mode operation; ...
CVE-2002-0936
CVE-2002-0936 affects the Java Server Pages (JSP) engine in Apache Tomcat. A JSP page that calls WPrinterJob().pageSetup(null,null) can cause a denial of service by crashing the web server. The published materials describe the vulnerability and impact but do not provide a listed fix or patch with...
CVE-2000-0936
Samba SWAT in Samba 2.0.7 exposes the cgi.log file with world-readable permissions, enabling local users to read sensitive data (e.g., user names and passwords). Affected component: Samba Web Administration Tool (SWAT). Root cause: SWAT’s logging file is installed world-readable, leaking credenti...
CVE-1999-0936
BNBSurvey survey.cgi program allows remote attackers to execute commands via shell metacharacters...
CVE-1999-0936
CVE-1999-0936 affects BNBSurvey’s Survey.cgi (Big Nose Bird) remote CGI script. The vulnerability arises from insufficient input validation, allowing shell metacharacters to be injected in user input, enabling remote command execution with the web server’s privileges. Severity is high (CVSSv2 bas...