CVE-2006-1233

CVE-2006-1233 describes multiple cross-site scripting (XSS) vulnerabilities in WMNews. Affected components include wmview.php (ArtCat parameter), footer.php (ctrrowcol parameter), and wmcomments.php (ArtID parameter). The provided documents indicate that remote attackers can inject arbitrary web ...

CVE-2003-1233

Pedestal Software Integrity Protection Driver (IPD) 1.3 and earlier is affected. The root cause is the ability to create a symbolic link via NtCreateSymbolicLinkObject to access sensitive kernel resources, specifically to \Device\PhysicalMemory or via a drive letter created with subst. This bypas...

CVE-2000-1233

Phorum 3.0.7 contains a SQL injection vulnerability in read.php3 and other scripts that allows remote attackers to inject arbitrary SQL via the sSQL parameter. Affected component: Phorum 3.0.7 scripts; root cause: unsafely interpolated sSQL input leading to SQL query manipulation. Impact is descr...

CVE-2005-1233

The CVE-2005-1233 issue concerns an XSS vulnerability in the PHP Labs proFile product’s index.php, exploitable via the (1) dir and (2) file parameters. The root cause is unsanitized input leading to arbitrary script/HTML injection in responses. Impact is remote code/input manipulation potential f...

CVE-2005-1233

Cross-site scripting XSS vulnerability in index.php in PHP Labs proFile allows remote attackers to inject arbitrary web script or HTML via the 1 dir or 2 file parameters...

CVE-2004-1233

CVE-2004-1233 concerns Gadu-Gadu’s DCC file transfer capability: an integer overflow in processing a user packet with an invalid file length. This leads to denial of service (disk consumption) when the vulnerable component handles DCC file transfers. Affected software is Gadu-Gadu; the exact vers...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

CVE-2002-1233

A regression error in the Debian distributions of the apache-ssl package before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0, for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs 1...

CVE-2002-1233

CVE-2002-1233 applies to Debian’s apache-ssl packages, where a regression in Apache 1.3.27 and earlier (Debian 2.2 before 1.3.9, Debian 3.0 before 1.3.26) allows local attackers to read or modify the Apache password file via a symlink attack when running htpasswd or htdigest. The issue reintroduc...

CVE-2001-1233

Netware Enterprise Web Server 5.1 with GroupWise WebAccess 5.5 and NDS enabled is affected. The vulnerability allows remote attackers to enumerate usernames, group names and other system information by accessing ndsobj.nlm, due to exposure of directory information. CVSS v2.0 base score is 5.0 (AV...

CVE-1999-1233

Product/affected component: IIS 4.0. Vulnerability description: The “Domain Resolution” issue occurs because access is not properly restricted for the initial session request from an IP address that does not resolve to a DNS domain. Root cause (as stated): Improper restriction of initial session ...

CVE-2001-1233

Netware Enterprise Web Server 5.1 running GroupWise WebAccess 5.5 with Novell Directory Services NDS enabled allows remote attackers to enumerate user names, group names and other system information by accessing ndsobj.nlm...