91 matches found
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2007-1599
CVE-2007-1599 affects WordPress and is documented across multiple connected sources. The vulnerability enables remote attackers to abuse wp-login.php by manipulating the redirect_to parameter to redirect authenticated users to external sites and potentially disclose sensitive information. The Deb...
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2007-1599
wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirectto parameter...
CVE-2006-1599
Vulnerability CVE-2006-1599 affects v-creator before 1.3-pre3, in VCEngine.php when VC_CRYPTO_METHOD is OPENSSL. Root cause appears to be issues in the encrypt and decrypt functions, enabling remote command execution. The available sources indicate the vulnerability resides in the crypto handling...
CVE-2005-1599
The CVE-2005-1599 entry describes a cross-site scripting (XSS) flaw in Kryloff Technologies Subject Search Server (SSServer) 1.1, exploitable via the "Search For" field to inject arbitrary web script/HTML. The NVD/CVE records show a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base 4.3) but n...
CVE-2002-1599
Removed by vendor...
CVE-2002-1599
CVE-2002-1599 affects DansGuardian prior to 2.4.5-1, where remote attackers can bypass content filtering rules using hex-encoded URLs. CVSS shows Network attack, Low complexity, No auth, with Partial impact to confidentiality, integrity, and availability (base score 7.5). No remediation details a...
CVE-2004-1599
CVE-2004-1599 concerns a Cross-site Scripting (XSS) vulnerability in CoolPHP 1.0-stable, exploitable via index.php using the query or nick parameters. The underlying issue is insufficient input handling in the affected script, allowing an attacker to inject and execute arbitrary web scripts/HTML ...
