CVE-2005-2246

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the 1 docpath parameter to getpage.php or 2 setmenu parameter to lib/static/header.php...

CVE-2004-2195

Zanfi CMS Lite 1.1 is affected by a PHP remote file inclusion in index.php via the inc parameter, leading to arbitrary PHP code execution. The issue is a file inclusion vulnerability in Zanfi CMS Lite’s index.php that allows an attacker to have the remote script include and run attacker-controlle...

CVE-2004-2161

SQL injection vulnerability in fileoverview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the linkid parameter...

CVE-2005-2090

CVE-2005-2090 affects Jakarta Tomcat 5.0.19 (Coyote/1.1) and Tomcat 4.1.24 (Coyote/1.0): it enables HTTP Request Smuggling via a request containing both Transfer-Encoding: chunked and Content-Length, causing the body to be mis‑interpreted and processed as a new request. This issue is noted to hav...

CVE-2002-1808

CVE-2002-1808 describes a cross-site scripting (XSS) flaw in Meunity Community System 1.1 . The vulnerability allows remote attackers to inject arbitrary web script or HTML by placing Javascript in an IMG tag during topic creation. The root cause, as stated, is insufficient input sanitization of ...

CVE-2002-1960

CVE-2002-1960 concerns a cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 . The flaw allows remote attackers to inject arbitrary web script or HTML via an HTML link. According to NVD, the vulnerability has a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with no confidential...

CVE-2002-1680

CVE-2002-1680 concerns CGI Online Worldweb Shopping 1.1 (COWS). The vulnerability is a Cross-site Scripting (XSS) flaw in the server-side scripts, allowing remote attackers to execute arbitrary script as other users by injecting code into diagnose.cgi or compatible.cgi. The description identifies...

CVE-2005-1998

Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2005-1998

CVE-2005-1998 is a directory traversal vulnerability affecting McGallery 1.1, where the lang parameter can be exploited with .. to read arbitrary files from the server. The commonly cited references (NVD, CVE List, CVE.org) confirm the issue and the affected product/version, but the materials do ...

CVE-2005-1997

The CVE-2005-1997 vulnerability affects McGallery 1.1, specifically the show.php component. The issue arises when a modified host parameter enables remote attackers to connect to arbitrary databases or to trigger error conditions that disclose sensitive information. The underlying fault is the ha...

CVE-2005-1975

Multiple cross-site scripting XSS vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter to index.php, or the 2 siteid, 3 nom, 4 email, or 5 commentaire parameters in commentaires.php...

CVE-2005-1975

Multiple cross-site scripting XSS vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the id parameter to index.php, or the 2 siteid, 3 nom, 4 email, or 5 commentaire parameters in commentaires.php...

Tcpdump - bgp_update_print Remote Denial of Service

Tcpdump - bgpupdateprint Remote Denial of Service / 2005-05-31: Modified by [email protected] to test tcpdump infinite loop vulnerability. libnet 1.1 Build a BGP4 update message with what you want as payload Copyright c 2003 Fr d ric Raynal All rights reserved. Examples: empty BGP UPDATE message:...

FutureSoft TFTP Server 2000 - Remote Denial of Service

FutureSoft TFTP Server 2000 - Remote Denial of Service / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail:...

CVE-2005-1786

Summary (CVE-2005-1786): FunkyASP AD System 1.1 is affected by an SQL injection in the admin.asp file, exploitable via the password parameter to execute arbitrary SQL and gain privileges. The vulnerability is described across multiple records (CVE/NT NVD entries and PT-2005-2754). The exploitatio...

CVE-2004-2117

CVE-2004-2117 : The Tiny Server 1.1 product is affected. It allows remote attackers to cause a denial of service (crash) by sending malformed HTTP requests, such as a GET request without an HTTP version (HTTP/1.1) or a request lacking both GET and the HTTP version. The provided documents do not i...

CVE-2004-2117

Tiny Server 1.1 allows remote attackers to cause a denial of service crash via malformed HTTP requests such as 1 a GET request without the HTTP version HTTP/1.1, or 2 a request without GET or the HTTP version...

CVE-2004-2119

The CVE-2004-2119 entry documents a Cross-site scripting (XSS) vulnerability in Tiny Server 1.1, where an attacker can inject arbitrary web script or HTML via the URL. The vulnerability affects Tiny Server 1.1’s URL handling and has a base severity of MEDIUM (CVSS v2: 4.3) with network attack vec...

CVE-2004-2118

CVE-2004-2118 affects Tiny Server 1.1. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a GET request with a long filename, possibly due to a buffer overflow. The provided documents do not include a confirmed patch or fix version. No exploitation details o...

CVE-2004-2118

Tiny Server 1.1 allows remote attackers to cause a denial of service crash via a GET request with a long filename, possibly due to a buffer overflow...