CVE-2006-0075

Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via the e-mail field mail variable in a new message, which is written to a PHP file...

CVE-2004-2403

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...

CVE-2004-2403

CVE-2004-2403 describes a CSRF vulnerability in YaBB 1 GOLD SP 1.3.2. An attacker can cause the administrative user to perform unauthorized actions by enticing the admin to click a crafted link or view an IMG tag that targets YaBB.pl with specific action, id, and moda parameters. The vulnerabilit...

CVE-2002-2123

The CVE-2002-2123 entry concerns Gallery 1.3.2’s publish_xp_docs.php PHP remote file inclusion vulnerability. An attacker can specify a URL to an init.php in the GALLERY_BASEDIR parameter, enabling arbitrary PHP code execution on the affected system. The affected software/function is publish_xp_d...

CVE-2004-2035

CVE-2004-2035 affects MiniShare 1.3.2, where remote attackers can cause a denial of service (crash) by sending a malformed HTTP GET or HEAD request that has an improper number of trailing CRLF sequences. The available records confirm the vulnerability and its impact as a crash/DoS, but do not pro...

CVE-2005-0253

Directory traversal vulnerability in index.php for BibORB 1.3.2, and possibly earlier versions, allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the databasename parameter...

Sun JavaMail 1.3.2 - MimeBodyPart.getFileName Directory Traversal

Sun JavaMail 1.3.2 - MimeBodyPart.getFileName Directory Traversal source: https://www.securityfocus.com/bid/13141/info Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet. This...

Sun JavaMail 1.3.2 - 'MimeBodyPart.getFileName' Directory Traversal

source: https://www.securityfocus.com/bid/13141/info Sun JavaMail is prone to a directory traversal vulnerability. This arises because the API fails to properly validate filenames in email attachments received by the applet. This issue was reported to affect JavaMail 1.3.2, however, earlier...

CVE-2005-0251

BibORB is affected by a cross-site scripting (XSS) vulnerability in bibindex.php, affecting BibORB 1.3.2 and possibly earlier versions. The issue allows remote attackers to inject arbitrary HTML/script via the search parameter, enabling client-side execution when viewing data. Public reports (e.g...

CVE-2005-0253

CVE-2005-0253 affects BibORB, specifically 1.3.2 and earlier. A directory traversal flaw in index.php (database_name parameter) allows remote attackers with Delete action rights to delete arbitrary files on the host where BibORB runs. Related disclosures (Full-Disclosure advisory, PacketStorm not...

PT-2005-1332 · Biborb · Biborb

Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the Username or Password variables. Recommendations: For BibORB versions 1.3.2 and earlier, update to...

PT-2005-1333 · Biborb · Biborb

Name of the Vulnerable Software and Affected Versions: BibORB versions 1.3.2 and earlier Description: The issue allows remote attackers to delete arbitrary files via a Delete action and .. dot dot sequences in the database name parameter in index.php. Recommendations: For BibORB versions 1.3.2 an...

CVE-2004-2403

Cross-site request forgery CSRF vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters...

YaBB < Gold SP 1.3.2 Multiple Input Validation Vulnerabilities

Binary data 2312.prm...

CVE-2004-0725

Cross-site scripting XSS vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter...

DoS in MiniShare 1.3.2

Donato Ferrante Application: MiniShare http://minishare.sourceforge.net/ Version: 1.3.2 Bug: Denial Of Service Date: 26-May-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...

CVE-2002-2123

PHP remote file inclusion vulnerability in publishxpdocs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERYBASEDIR parameter...

CVE-1999-1409

CVE-1999-1409 affects the at utility in IRIX 6.2 and NetBSD 1.3.2 and older. Local users can read portions of arbitrary files by submitting the file to at with the -f argument, which causes at to generate error messages that are emailed to the user. The description notes a local-privilege/partial...

CVE-1999-1409

The at program in IRIX 6.2 and NetBSD 1.3.2 and earlier allows local users to read portions of arbitrary files by submitting the file to at with the -f argument, which generates error messages that at sends to the user via e-mail...