CVE-2009-1326

CVE-2009-1326 affects Mini-stream RM Downloader 3.0.0.9, where a stack-based buffer overflow allows remote code execution via a long URI in a playlist (.m3u) file. OpenVAS entries corroborate a buffer overflow vulnerability for Mini-Stream products. The vulnerability arises from processing length...

CVE-2008-1326

Gallarific is affected by a Cross-site Scripting (XSS) vulnerability in search.php, exploitable via the query parameter to inject arbitrary web script/HTML. This is the explicit vulnerability described across multiple sources (including OpenVAS and NVD entries). The connected documents do not pro...

CVE-2008-1326

creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31369...

Debian Security Advisory DSA 1326-1 (fireflier-server)

The remote host is missing an update to fireflier-server announced via advisory DSA 1326-1. OpenVAS Vulnerability Test $Id: deb13261.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1326-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-1326-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1326-1 : fireflier-server - insecure temporary files

Steve Kemp from the Debian Security Audit project discovered that fireflier-server, an interactive firewall rule creation tool, uses temporary files in an unsafe manner which may be exploited to remove arbitrary files from the local system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2007-1326

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

CVE-2007-1326

The CVE-2007-1326 entry concerns a SQL injection in Serendipity 1.1.1. Affects index.php where the parameter serendipity[multiCat][] can be supplied by an attacker to execute arbitrary SQL commands. This is exploitable remotely and can compromise data integrity and confidentiality as described. T...

CVE-2006-1326

CVE-2006-1326 affects Invision Power Board 2.0.4, with multiple XSS vulnerabilities exploitable through various parameters in index.php and related actions (Search, calendar, Print, Mail, Help, Members). The NVD description lists 16 input vectors in the application that may inject arbitrary scrip...

CVE-2005-1326

CVE-2005-1326 describes a buffer overflow in the VooDoo cIRCle BOTNET prior to version 1.0.33, enabling remote authenticated attackers to cause a denial of service (client crash) through a crafted packet. The vulnerability is documented across multiple sources (NVD, CVE/Vuln lists) with a base sc...

CVE-2004-1326

Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter...

CVE-2003-1326

Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."...

CVE-2001-1326

CVE-2001-1326 affects Eudora 5.1, where remote code execution is possible when the "Use Microsoft Viewer" option is on and the "allow executables in HTML content" option is off. An HTML email containing a form activated from an image spoofed as a link causes the user to execute the form and acces...

CVE-2001-1326

Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to...

CVE-1999-1326

Wu-FTPD ABOR privilege escalation (CVE-1999-1326) affects the wu-ftpd server. The vulnerability arises when handling an ABOR after a data connection has closed, due to a flaw in the dologout() path that can allow a remote attacker to gain elevated privileges (potentially root). Exploitation could...

CVE-1999-1326

wu-ftpd 2.4 FTP server does not properly drop privileges when an ABOR abort file transfer command is executed during a file transfer, which causes a signal to be handled incorrectly and allows local and possibly remote attackers to read arbitrary files...