110 matches found
CVE-2005-1223
Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adminid field...
CVE-2000-1223
CVE-2000-1223 affects Quikstore Shopping Cart: quikstore.cgi is vulnerable to remote command execution via shell metacharacters in the URL portion of an HTTP GET request. The issue enables arbitrary commands to be executed on the server. Connected sources (Red Hat advisory, CVE records, and NVD) ...
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters...
CVE-2004-1223
The CVE-2004-1223 entry refers to a path-disclosure issue in F-Secure Policy Manager. The affected component is the Management Agent’s web interface (fsmsh.dll) used by Policy Manager 5.11.2810, where an HTTP request without parameters can reveal sensitive information such as the web server’s abs...
CVE-2002-1223
Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps PostScript input file...
CVE-2002-1223
Technical details about CVE-2002-1223 are not publicly available in the provided connected documents. The OpenVAS/ENISA entries pertain to unrelated issues (Solaris Perl updates, malware mention) and do not supply product/version/impact data for this CVE. Monitor for updates.
Winamp b4s File Handling Multiple Malformed Fields Overflow
Binary data 1223.prm...
CVE-2001-1223
The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...
CVE-1999-1223
The CVE-1999-1223 entry concerns IIS 3.0. It describes a remote denial-of-service condition triggered by an ASP page request whose URL contains a very large number of forward-slash characters. The available references reiterate that this input pattern can disrupt the service, but the documents do...
