150 matches found
CVE-2002-1053
Cross-site scripting XSS vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message...
CVE-2001-1053
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument. Affected component: AdLogin.pm in AdCycle. Impact: authentication bypass and privileges escalation (confidentiality, integrity, and availabi...
CVE-1999-1053
CVE-1999-1053 relates to the guestbook.pl CGI which sanitizes Server-Side Includes by stripping text between . The provided data confirms a vulnerability where this sanitization is incomplete, allowing remote attackers to execute arbitrary commands when guestbook.pl runs on Apache 1.3.9 and poten...
CVE-1999-1053
guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "--"...
CVE-2000-1053
Allaire JRun 2.3.3 server is affected by CVE-2000-1053. The vulnerability allows remote attackers to compile and execute JSP code by injecting it through a cross-site scripting (CSS) attack and then directly invoking the com.livesoftware.jrun.plugins.JSP JSP servlet. Exploitation details, affecte...
CVE-1999-1053
guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "--"...
CVE-2017-1053
CVE-2017-1053 is rejected/not used and does not represent an active vulnerability entry.
Office 2019 1053
Office 2019 1053...