CVE-2009-1344

The CVE-2009-1344 issue affects the Drupal Localization client module. A Cross-site Scripting (XSS) vulnerability exists in the translation functionality, allowing remote attackers to inject arbitrary web script or HTML via input to the translation feature for Drupal modules: Localization client ...

CVE-2008-1344

MyioSoft EasyCalendar 4.0tr and earlier are affected by SQL injection in two vectors: (1) year parameter in dayview action to plugins/calendar/calendar_backend.php and (2) page parameter to ajaxp_backend.php. Remote attackers can execute arbitrary SQL commands. Affected software/versions are not ...

CVE-2008-1344

creationtimestamp| type| source ---|---|--- 2008-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5246...

Code injection

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

Debian: Security Advisory (DSA-1344-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-1344

CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...

CVE-2005-1344

Buffer overflow in htdigest in Apache 2.0.52 may allow attackers to execute arbitrary code via a long realm argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is...

CVE-2005-1344

CVE-2005-1344 describes a buffer overflow in Apache's htdigest (version 2.0.52) that could allow arbitrary code execution via a long realm argument. The advisory notes that htdigest is typically locally accessible and not setuid/setgid, so privilege escalation is unlikely unless htdigest is invok...

CVE-2003-1344

Trend Micro Virus Control System TVCS Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files...

CVE-2002-1344

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing 1 /absolute/path or 2 .. dot dot sequences...

CVE-2002-1344

CVE-2002-1344 affects wget prior to 1.8.2-4 and is confirmed across multiple disclosures. The vulnerability is a directory-traversal flaw that allows a malicious FTP server to create or overwrite files as the wget user by using filenames containing /absolute/path or .. sequences. Public documenta...

CVE-2001-1344

CVE-2001-1344 concerns WSSecurity.pl in WebStore, where authentication can be bypassed by supplying a filename that exists, aided by a null character or a .. traversal. Affected is WebStore’s WSSecurity.pl component; the underlying issue is improper handling of user-supplied filenames enabling by...

CVE-1999-1344

CVE-1999-1344 affects Auto_FTP 0.2, where Auto_FTP.pl stores usernames and passwords in plaintext in the auto_ftp.conf file. The underlying issue is plaintext credential storage, enabling disclosure of credentials over the network (NVD metric: CVSSv2 v2.0 base score 7.5, HIGH). Exploitation detai...

CVE-2001-1344

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by 1 inserting a null character or 2 .. dot dot...