93 matches found
CVE-2006-1293
CVE-2006-1293 describes a cross-site scripting (XSS) vulnerability in Contrexx CMS up to version 1.0.8 (and earlier) where an attacker can inject arbitrary script or HTML via the PHP_SELF query string to index.php. Affected software: Contrexx CMS (versions
CVE-2003-1293
Multiple cross-site scripting XSS vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Email and 3 Message fields when signing the guestbook...
CVE-2005-1293
CVE-2005-1293 involves multiple SQL injection vulnerabilities in StorePortal 2.63’s default.asp. The affected component is the web application entry point (default.asp) with six injectable parameters: language, bpic, idcategory, content, keyword, and idproduct. The underlying issue is improper in...
CVE-2004-1293
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file...
CVE-2004-1293
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file...
CVE-2004-1293
CVE-2004-1293 describes a buffer overflow in the ReadFontTbl function of reader.c in rtf2latex2e 1.0fc2. This vulnerability allows remote attackers to execute arbitrary code via a crafted RTF file. The available connected sources consistently reference the same issue across multiple feeds (NVD, S...
CVE-2003-1293
Multiple cross-site scripting XSS vulnerabilities in NukedWeb GuestBookHost allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Email and 3 Message fields when signing the guestbook...
CVE-2002-1293
The CVE concerns the Microsoft Java implementation used in Internet Explorer. A public load0() method in the CabCracker class (com.ms.vm.loader.CabCracker) allows remote attackers to bypass security checks performed by load(), enabling potential bypass of authentication/validation logic. The vuln...
CVE-2002-1293
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0 method for the CabCracker class com.ms.vm.loader.CabCracker, which allows remote attackers to bypass the security checks that are performed by the load method...
CVE-2001-1293
Affected product: 3Com HomeConnect Cable Modem External with USB (model 3CR29223). Vulnerability: Buffer overflow in the modem’s web server; remote attacker can trigger a denial of service (crash) by sending a long HTTP request, impacting availability of the device’s internal network configuratio...
CVE-1999-1293
modproxy in Apache 1.2.5 and earlier allows remote attackers to cause a denial of service via malformed FTP commands, which causes Apache to dump core...
CVE-1999-1293
CVE-1999-1293 concerns Apache’s mod_proxy in version 1.2.5 and earlier. The vulnerability allows remote attackers to trigger a denial of service by sending malformed FTP commands, which causes Apache to dump core. The available public description states the impact as a complete denial of service ...