113 matches found
CVE-2006-1423
CVE-2006-1423 corresponds to a SQL injection vulnerability in showflat.php of UBB.threads (versions 5.5.1, 6.0 br5, 6.0.1, 6.0.2 and earlier). The issue allows remote attackers to inject arbitrary SQL through the Number parameter, enabling potential unauthorized database access. Connected sources...
CVE-2005-1423
CVE-2005-1423 affects Software602 602LAN SUITE; the mail component is vulnerable to directory traversal via .. sequences in the A parameter, enabling remote denial of service and potential file presence enumeration. Vulnerable in 2004.0.05.0413; fixed in 2004.0.05.0509 (or later). Upgrade to 2004...
CVE-2001-1423
The CVE-2001-1423 entry describes a privilege-escalation vulnerability in Advanced Poll prior to version 1.61 when using a flat-file database. The issue arises when an attacker can set the logged_in parameter to gain elevated privileges remotely. Documented impacts indicate partial confidentialit...
CVE-2004-1423
PHP-Calendar (Sean Proctor) before 0.10.1 contains multiple remote file inclusion flaws. The vulnerability is triggered by a URL in the phpc_root_path parameter to includes/calendar.php or includes/setup.php, allowing remote attackers to execute arbitrary PHP code. Affected product: PHP-Calendar;...
CVE-2004-1423
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office VLO and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpcrootpath parameter to 1 includes/calendar.ph...
CVE-2003-1423
Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords...
CVE-2002-1423
tmpview.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter...
CVE-2002-1423
The CVE-2002-1423 issue concerns FUDforum, where tmp_view.php before version 2.2.0 allows remote attackers to read arbitrary files through an absolute pathname supplied in the file parameter. The underlying vulnerability is a path traversal/unsafe file inclusion in the tmp_view.php handler, enabl...
CVE-1999-1423
CVE-1999-1423 concerns Solaris 2.3–2.6 where a local user can trigger a denial-of-service (crash) by sending a ping to a multicast address via the loopback interface (e.g., ping -i). The vulnerability is local in scope and results in an availability impact described as PARTIAL. The records consis...
CVE-2001-1423
Advanced Poll before 1.61, when using a flat file database, allows remote attackers to gain privileges by setting the loggedin parameter...