CVE-2003-1213

MaxWebPortal 1.30 stores its portal database under the web document root with insecure access control, allowing remote retrieval of database/db2000.mdb via a direct request. This causes partial confidentiality impact (CVSS: AV:N/AC:L/Au:N/C:P/I:P/A:P). The CVE entry provides no exploitation detai...

CVE-2004-1213

Cross-site scripting XSS vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the entry parameter...

CVE-2004-1213

The CVE-2004-1213 entry concerns an XSS vulnerability in the index.php of Advanced Guestbook versions 2.3.1, 2.2, and potentially other releases. The issue allows remote attackers to inject arbitrary web scripts or HTML via the entry parameter. The description provided with the CVE states the vul...

CVE-2003-1213

The default installation of MaxWebPortal 1.30 stores the portal database under the web document root with insecure access control, which allows remote attackers to obtain sensitive information via a direct request to database/db2000.mdb...

CVE-2002-1213

Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." dot-dot sequences containing URL-encoded forward slash "%2F" characters...

CVE-2002-1213

RadioBird Software WebServer 4 Everyone versions 1.23 and 1.27 (and earlier than 1.30) contain a directory-traversal vulnerability that lets remote attackers read arbitrary files via HTTP requests containing dot-dot sequences with URL-encoded forward slashes (%2F). Root cause: improper validation...

CVE-2000-1213

The CVE-2000-1213 entry concerns ping (iputils) before 20001010, distributed on Red Hat Linux 6.2–7J and other OSes. The root cause is that ping fails to drop privileges after acquiring a raw socket, increasing exposure to bugs that would occur at lower privileges. The vulnerability is tied to th...

CVE-2000-1213

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...

CVE-2001-1213

The CVE-2001-1213 entry applies to DataWizard FtpXQ 2.0 and 2.1, where a default configuration uses a default username and password, enabling remote attackers to read and write arbitrary files in the root folder. Root cause: default credentials in the product’s default setup. Impact per NVD: conf...

CVE-1999-1213

CVE-1999-1213 refers to a vulnerability in the telnet service of HP-UX 10.30 that allows a denial of service. The available connected documents do not provide concrete technical details such as affected component versions beyond HP-UX 10.30, specific root cause, exploit method, impact scope, or a...

CVE-2000-1213

ping in iputils before 20001010, as distributed on Red Hat Linux 6.2 through 7J and other operating systems, does not drop privileges after acquiring a raw socket, which increases ping's exposure to bugs that otherwise would occur at lower privileges...