1551 matches found
CVE-2003-1140
Buffer overflow in Musicqueue 1.2.0 allows local users to execute arbitrary code via a long language variable in the configuration file...
CVE-2005-0670
Cross-site scripting XSS vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via 1 the new parameter to mod.php, 2 the w parameter to mod.php, 3 the e parameter to login.php, 4 the o parameter to login.php, and possibly other scripts...
CVE-2005-0966
The IRC protocol plugin in Gaim 1.2.0, and possibly earlier versions, allows 1 remote attackers to inject arbitrary Gaim markup via ircmsgkick, ircmsgmode, ircmsgpart, ircmsgquit, 2 remote attackers to inject arbitrary Pango markup and pop up empty dialog boxes via ircmsginvite, or 3 malicious IR...
CVE-2005-0967
Gaim 1.2.0 is affected by CVE-2005-0967. The issue occurs when handling a malformed file transfer request to a Jabber user, which leads to an out-of-bounds read and causes the application to crash (denial of service). The vulnerability focuses on Jabber message/file transfer parsing; no exploit d...
CVE-2005-0965
CVE-2005-0965 affects the Gaim client. The description states a buffer/out-of-bounds read caused by the gaim_markup_strip_html function when processing malformed HTML, allowing remote attackers to trigger a denial of service (application crash) in Gaim 1.2.0 and possibly earlier versions. Public ...
CVE-2005-0905
CVE-2005-0905 relates to Maxthon 1.2.0, where remote websites could obtain potentially sensitive data from the browser’s search bar via the m2_search_text property. The available documents identify the affected product/version and the vulnerable data exposure mechanism but do not provide explicit...
CVE-2005-0905
Maxthon 1.2.0 allows remote malicious web sites to obtain potentially sensitive data from the search bar via the m2searchtext property...
CVE-2004-1282
Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation...
PHPMyPub (PHP)
Informations : °°°°°°°°°°°°°° Website : http://phpmypub.free.fr Version : 1.2.0 Problem : Admin access PHP Code/Location : °°°°°°°°°°°°°°°°°°° admin/index.php : ------------------------------------------------------------------------ ... $auth = $HTTPCOOKIEVARS"adminpub"; if !$auth if $formulaire...
CVE-2001-1248
CVE-2001-1248 affects vWebServer 1.2.0, enabling remote attackers to view arbitrary ASP scripts by requesting an ASP file that ends with a URL-encoded space (%20). The issue is classified as a information-disclosure vulnerability (CVSSv2 base score 5.0, AV:N/AC:L/Au:N/C:P/I:N/A:N); no exploit spe...