871 matches found
Multiple SQL Injection Vulnerabilities in DeskPRO
Multiple SQL Injection Vulnerabilities in DeskPRO ------------------------------------------------------------------------- Article reference: http://www.securiteam.com/unixfocus/6R0052K8KM.html SUMMARY DeskPRO http://www.deskpro.com is "an integrated script to manage your customer sales and...
mutant penguin mpweb pro 1.1.2 - Directory Traversal
mutant penguin mpweb pro 1.1.2 - Directory Traversal source: https://www.securityfocus.com/bid/8745/info It has been reported that MPWeb PRO may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/./../' character...
Respondus v1.1.2 stores passwords using weak encryption
Respondus Version 1.1.2 7-26-2001 stores passwords using weak encryption. Synopsis: If you have Respondus remember your userid and password it will store them in the WEBCT.SVR file in the "Respondus Projects" directory. The information is "encrypted" by taking the ASCII value of each password...
CVE-2000-0726
CVE-2000-0726 affects Stalkerlab Mailers CGIMail.exe (1.1.2). The CGI program allows remote attackers to read arbitrary files by specifying the target file in the hidden $Attach$ form variable, resulting in information disclosure. Connected sources (OpenVAS/Nessus plugins and CVE/NVD records) cor...
CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...
CVE-2000-0918
The CVE-2000-0918 entry describes a format string vulnerability in KDE's kvt component (version 1.1.2) that may allow local users to execute arbitrary commands via a DISPLAY environment variable containing formatting characters. The affected software is KDE 1.1.2; root cause is unsafe format-stri...
CVE-2000-0918
Format string vulnerability in kvt in KDE 1.1.2 may allow local users to execute arbitrary commands via a DISPLAY environmental variable that contains formatting characters...
CVE-2000-0530
The CVE-2000-0530 entry describes a vulnerability in KDE 1.1.2 where the KApplication-class creates configuration files without proper ownership checks or existence verification. The result is a local privilege-attack risk: a local user can exploit a symlink/ownership flaw to overwrite arbitrary ...
CVE-2000-0090
CVE-2000-0090 affects VMware 1.1.2 and describes a local denial-of-service condition caused by a symlink attack. The provided documents confirm the vulnerability and its local access vector, but do not provide exploitation details beyond the basic description, nor any remediation or patch informa...