CVE-2009-1317

Aqua CMS 1.1 is affected by multiple SQL injection vulnerabilities when magic_quotes_gpc is disabled. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the userSID cookie parameter to droplets/functions/base.php and (2) the username parameter to admin/index.php....

CVE-2008-1317

CVE-2008-1317 affects Solaris 10 with an unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem. The issue allows local users to cause a denial of service (reboot) through blocked I/O message queues. The provided documents confirm the affected platform (Sun Sol...

Netcat v1.10 NT Stack Buffer Overflow

This module exploits a stack buffer overflow in Netcat v1.10 NT. By sending an overly long string we are able to overwrite SEH. The vulnerability exists when netcat is used to bind -e an executable to a port in doexec.c. This module tested successfully using "c:\nc -L -p 31337 -e ftp". This modul...

CVE-2003-1317

Technical details about CVE-2003-1317 are not publicly provided in the connected documents. The available information confirms an XSS issue in eNdonesia mod.php, but no deeper technical specifics are included here. Monitor for updates.

CVE-2005-1317

CVE-2005-1317 affects the Horde Chora module prior to version 1.2.3, enabling a remote attacker to execute arbitrary script/HTML via the parent frame page title (XSS). The vulnerability is due to insufficient input sanitization in the frame title handling. No exploitation details or concrete reme...

CVE-2004-1317

Netcat for Windows 1.1 is affected by a stack-based buffer overflow in doexec.c when used with the -e option. An overly long DNS command can overflow the stack and enable remote code execution. This is the same base vulnerability described in CVE-2004-1317, with corroborating references in exploi...

CVE-2004-1317

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command...

CVE-2004-1317

Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command...

CVE-2002-1317

Buffer overflow in Dispatch routine for XFS font server fs.auto on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service crash or execute arbitrary code via a certain XFS query...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

CVE-2003-1317

Cross-site scripting XSS vulnerability in mod.php in eNdonesia 8.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2002-1317

Buffer overflow in Dispatch routine for XFS font server fs.auto on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service crash or execute arbitrary code via a certain XFS query...

CVE-2001-1317

Teamware Office Enterprise Directory allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1317

The connected CERT CERT Advisory CA-2001-18 documents multiple vulnerabilities in Teamware Office LDAP server that may allow remote denial-of-service and possibly arbitrary code execution, triggered by malformed/invalid BER-encoded LDAP data (as demonstrated by PROTOS LDAPv3 tests). Affected prod...

CVE-1999-1317

CVE-1999-1317: A local privilege-escalation vulnerability affecting Windows NT 4.0 SP4 and earlier. The flaw arises from allowing modification of the symbolic link table in the ?? object folder by varying case letters to point to a different device, enabling local users to gain privileges. The co...

CVE-2001-1317

Teamware Office Enterprise Directory allows remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for certain BER object types, as demonstrated by the PROTOS LDAPv3 test suite...