CVE-2004-1564

The CVE-2004-1564 entry concerns w-Agora 4.1.6a, where CRLF injection in subscribe_thread.php allows HTTP Response Splitting to alter server‑generated HTML content via the thread parameter. The vulnerability is caused by improper handling of input that can introduce CRLF sequences in HTTP headers...

CVE-2004-1564

CRLF injection vulnerability in subscribethread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter...

CVE-2003-1564

libxml2, possibly before 2.5.0, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, aka the "billion laughs...

CVE-2002-1564

Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability...

CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Internet Explorer 5.5 and 6.0 where a cookie can contain script that is executed when a page loads, allowing remote attackers to steal potentially sensitive information from cookies (information disclosure). The underlying issue is the ability for a page...

CVE-2002-0192

CVE-2002-0193 and CVE-2002-1564 describe Internet Explorer 5.01/5.5/6.0 vulnerabilities. CVE-2002-0193: remote code execution via malformed Content-Disposition/Content-Type headers causing the spoofed file type to be handled by the OS. CVE-2002-1564: cookie-based script in cookies that can expose...

CVE-1999-1564

FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service panic with a large number accesses of an NFS v3 mounted directory from a large number of processes...