Debian DSA-1374-1 : jffnms - several vulnerabilities

Several vulnerabilities have been discovered in jffnms, a web-based Network Management System for IP networks. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3189 Cross-site scripting XSS vulnerability in auth.php, which allows a remote attacker to...

CVE-2007-1374

This entry documents a Cross-site scripting (XSS) vulnerability in Snitz Forums 2000, version 3.4.06, specifically in the pop_profile.asp component where an attacker can inject arbitrary script or HTML via the MSN parameter. The vulnerability is described consistently across CVE and NVD sources, ...

CVE-2006-1374

CVE-2006-1374 concerns an SQL injection in AdMan 1.0.20051221 and earlier. The vulnerability is in viewStatement.php via the transactions_offset parameter, allowing remote attackers to execute arbitrary SQL commands. Affected product: AdMan (version 1.0.20051221 and earlier). Root cause: unvalida...

Detection of various dangerous CGI scripts (HTTP) - Active Check

Various CGI scripts have known vulnerabilities tracked via the via the referenced CVEs. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also cove...

CVE-2005-1374

CVE-2005-1374 : Multiple cross-site scripting (XSS) vulnerabilities affect Claroline versions 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos. The flaws allow remote attackers to inject arbitrary script/HTML via various parameters across multiple scripts (e.g., exercise_result.php, lea...

CVE-2002-1374

The COMCHANGEUSER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password...

CVE-2002-1374

MySQL vulnerable in 3.x up to 3.23.53/3.23.53a and 4.x up to 4.0.5a, where the COM_CHANGE_USER command allows remote attackers to gain privileges via a brute-force, one-character password, because MySQL only compares the provided password against the first character of the real password. The issu...

CVE-2001-1374

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd...

CVE-2001-1374

Summary (concrete details from connected documents): The vulnerability is in the expect utility prior to version 5.32, where it searches for its libraries in /var/tmp before other directories. A local attacker could exploit this by placing a Trojan horse library that mkpasswd would load, potentia...

CVE-1999-1374

CVE-1999-1374 affects perlshop.cgi (PerlShop) Web shopping cart. A flaw in input validation allows remote attackers to inject commands via crafted input used in a mail-related operation (open MAIL) that invokes an external mail program, enabling remote command execution in the Web server process....

CVE-1999-1374

perlshop.cgi shopping cart program stores sensitive customer information in directories and files that are under the web root, which allows remote attackers to obtain that information via an HTTP request...

CVE-2001-1374

expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd...