CVE-2004-2127

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the file variable...

CVE-2004-2116

Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. dot dot in the URL...

CVE-2005-1786

SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...

PT-2005-2754 · Funkyasp · Funkyasp Ad System

Name of the Vulnerable Software and Affected Versions: FunkyASP AD System version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and gain privileges. This is achieved via the password parameter in the admin.asp file. Recommendations: For FunkyASP AD System...

CVE-2005-1667

DataTrac Activity Console 1.1 is affected by CVE-2005-1667, where a remote attacker can cause a denial of service by sending a long HTTP GET request. The connected documents confirm the affected product/version and the impact (DoS), but do not provide any remediation details or exploitation speci...

CVE-2004-2064

Cross-site scripting XSS vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the 1 Email or 2 Website fields...

CVE-2004-2064

CVE-2004-2064 concerns a cross-site scripting (XSS) vulnerability in lostBook version 1.1 and earlier. The vulnerability allows remote attackers to inject arbitrary web script via the (1) Email or (2) Website fields, enabling script execution in the context of the affected user’s browser. The ava...

CVE-2005-1429

SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1429

CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

CVE-2005-1360

The CVE-2005-1360 issue affects GrayCMS 1.1 and concerns a PHP remote file inclusion in error.php. The underlying problem is that the path_prefix parameter can be manipulated to reference a URL on a remote server that contains executable PHP code, enabling remote code execution. The connected doc...

GrayCMS 1.1 - 'error.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13381/info GrayCMS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected...

E-Cart <= 1.1 (index.cgi) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Example added if code doesn't work for ya: http://SITE/DIRTOECART/index.cgi?action=viewart&cat=reproductoresdvd&art=reproductordvp-ns315.dat|uname%20-a| /str0ke info: [email protected] use IO::Socket; print "\n\n www.badroot.org \n\n"; print...

[SA15054] WebAPP E-Cart Module Shell Command Injection Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: WebAPP E-Cart Module Shell Command Injection...

CVE-2005-0874

Multiple buffer overflows in the 1 AIM, 2 MSN, 3 RSS, and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service application crash via a long string in an HTTP 1.1 response header...

LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1

LogicLibrary BugScan Vulnerability Summary Report VSR Trillian 2.0, 3.0 and 3.1 3/23/2005 I. Background This report is based on the example in Guidelines for Security Vulnerability Reporting and Response, provided by the Organization for Internet Safety OIS. The template for this document can b...

CVE-2005-0501

CVE-2005-0501 affects Bontago 1.1 and earlier. The buffer overflow occurs via a long nickname, allowing remote attackers to execute arbitrary code. Reported CVSS v2 base score 7.5 (HIGH) with network attack vector and no authentication. No remediation details are provided in the connected documen...

CVE-2004-1665

PsNews is affected by cross-site scripting (XSS) flaws in index.php for version 1.1 (and older than 1.2). The OpenVAS/Nessus entries describe multiple parameter XSS allowing the attacker to steal cookies from legitimate users. The root cause is described as XSS in index.php via the no parameter, ...

CVE-2005-0462

MercuryBoard is affected (versions 1.0.x and 1.1.x) by a cross-site scripting (XSS) vulnerability that allows remote injection of HTML/script via the f parameter. The OpenVAS entry also notes multiple vulnerabilities including XSS, SQL injection, and path disclosure in MercuryBoard. The CVE-2005-...

CVE-2004-2428

Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password...