CVE-2010-1077

Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter...

CVE-2010-1077

Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter...

CVE-2010-1077

The CVE-2010-1077 entry concerns the Crawlability vBSEO plugin for vBulletin (Crawlability vBSEO plugin 3.1.0). The vulnerability is a directory traversal flaw in vbseo.php that allows remote attackers to cause local file inclusion and arbitrary code execution via traversal sequences in the vbseo...

CVE-2010-1077

creationtimestamp| type| source ---|---|--- 2010-02-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11526...

RedHat Security Advisory RHSA-2009:1077

The remote host is missing updates to the kernel announced in advisory RHSA-2009:1077. This update includes backported fixes for two approved security issues. These issues only affected users of Red Hat Enterprise Linux 4.7 Extended Update Support, as they have already been addressed for users of...

CVE-2009-1077

The Change My Password implementation in the admin interface in Sun Java System Identity Manager IdM 7.0 through 8.0 does not enforce the RequiresChallenge property setting, which allows remote authenticated users to change the passwords of other users, as demonstrated by changing the...

CVE-2009-1077

The CVE-2009-1077 entry concerns Sun Java System Identity Manager (IdM) 7.0–8.0. The admin Change My Password functionality fails to enforce the RequiresChallenge setting, enabling remote authenticated users to change other users’ passwords, demonstrated by altering the administrator account. Doc...

CVE-2008-1077

The CVE-2008-1077 entry concerns Simpleboard (com_simpleboard) 1.0.3 Stable for Mambo/Joomla!. The vulnerability is an SQL injection in index.php via the catid parameter in a view action, enabling remote attackers to execute arbitrary SQL commands. Affected component: Simpleboard 1.0.3 Stable for...

Debian Security Advisory DSA 1077-1 (lynx-ssl)

The remote host is missing an update to lynx-ssl announced via advisory DSA 1077-1. OpenVAS Vulnerability Test $Id: deb10771.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1077-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 062-1 (rxvt)

The remote host is missing an update to rxvt announced via advisory DSA 062-1. OpenVAS Vulnerability Test $Id: deb0621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 062-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2007-1077

CVE-2007-1077 affects Design4Online UserPages2 2.0 and is due to an SQL injection in page.asp, exploitable via the art_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on data confidentiality, integrity, and availability as described...

Debian DSA-1077-1 : lynx-ssl - programming error

Michal Zalewski discovered that lynx, the popular text-mode WWW Browser, is not able to grok invalid HTML including a TEXTAREA tag with a large COLS value and a large tag name in an element that is not terminated, and loops forever trying to render the broken HTML. The same code is present in...

CVE-2006-1077

Multiple cross-site scripting XSS vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via 1 the name parameter and 2 other unspecified parameters...

CVE-2006-1077

Evo-Dev evoBlog is affected by multiple cross-site scripting (XSS) vulnerabilities in the commentary feature. The issue allows remote attackers to inject arbitrary web script or HTML through the name parameter and other unspecified parameters. The reports indicate an XSS risk without specifying a...

CVE-2005-1077

CVE-2005-1077 concerns XSS vulnerabilities in XAMPP 1.4.x , allowing remote attackers to inject arbitrary script/HTML via the endpoints cds.php , Guestbook-EN.pl , or phonebook.php . The NVD entry lists a Medium base score (4.3) with network attack vector and no authentication needed, but the doc...

CVE-2003-1077

Technical details for CVE-2003-1077 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates in connected sources.

CVE-2002-1077

IMail Web Calendaring service (iwebcal) in IPSwitch IMail is affected by CVE-2002-1077. A remote attacker can cause a denial of service (crash) by sending an HTTP POST request that lacks a Content-Length header. The description and connected records confirm the affected component and the vulnerab...

CVE-2002-1077

IPSwitch IMail Web Calendaring service iwebcal allows remote attackers to cause a denial of service crash via an HTTP POST request without a Content-Length field...

CVE-2001-1077

Buffer overflow in ttprintf function of rxvt 2.6.2 allows local users to gain privileges via a long 1 -T or 2 -name argument...

CVE-2001-1077

rxvt 2.6.2 is affected by a buffer overflow in the tt_printf() function triggered by a long -T or -name argument, enabling a local user to gain privileges (stack overflow). Debian DSA 062-1 and OpenVAS entries describe the issue and advise upgrading rxvt to a patched package. The vulnerability in...