CVE-2007-1440

CVE-2007-1440: SQL injection in JGBBS 3.0 Beta 1’s search.asp allows remote command execution via the author parameter. Affected component is the search functionality in JGBBS 3.0 Beta 1; root cause is improper handling/concatenation of user-supplied input resulting in SQL injection. Public refer...

CVE-2006-1440

The CVE-2006-1440 entry affects Apple Mac OS X, specifically versions 10.3.9 and 10.4.6. The vulnerability arises from a BOM-related issue where an archive containing symbolic links can lead attackers to overwrite arbitrary files. The connected documents corroborate the same description, reinforc...

Mac OS X Multiple Vulnerabilities (Security Update 2006-003)

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications : AppKit ImageIO BOM CFNetwork ClamAV Mac OS X Server only CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Ma...

CVE-2005-1440

CVE-2005-1440 affects ViArt Shop Enterprise 2.1.6 and involves multiple cross-site scripting (XSS) flaws. The vulnerabilities allow remote attackers to inject arbitrary script/HTML via various entry points: basket.php parameters; forum.php fields (nickname, email, topic, message) as used by forum...

CVE-2001-1440

CVE-2001-1440 affects AIX 5.1L login when using loadable authentication modules; exact root cause is not publicly detailed in the provided documents. The vulnerability is described as enabling remote attackers to gain access to the system. CVSS data from NVD lists a base score of 10.0 (HIGH) with...

CVE-2003-1440

SpamProbe 0.8a allows remote attackers to cause a denial of service crash via HTML e-mail with newline characters within an href tag, which is not properly handled by certain regular expressions...

CVE-2002-1440

CVE-2002-1440 : The Gateway GS-400 server ships with a default root password “0001n” that cannot be changed via the administrative interface, enabling an attacker to obtain root privileges. The available documents confirm the existence of this default credential and the associated privilege escal...

CVE-1999-1440

CVE-1999-1440 affects Win32 ICQ 98a 1.30 and possibly other versions. The vulnerability arises because long filenames are not fully displayed, which could allow an attacker to send an executable file with a long name containing so many spaces that the .exe extension is not visible, potentially mi...

CVE-1999-1440

Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send an executable file with a long name that contains so many spaces that the .exe extension is not displayed, which could make the user believe that the file is...