CVE-2006-1644

InterAct 2.1.1’s login.php reveals an information-disclosure vulnerability: responses differ for valid vs invalid usernames, enabling remote enumeration of usernames. Affected component is login handling in Interact 2.1.1; root cause is input-based response variance. Impact is partial confidentia...

CVE-2006-0215

Cross-site scripting XSS vulnerability in admin.php in QualityEBiz Quality PPC QPPC 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: this issue might be resultant from CVE-2006-0216...

CVE-2005-1644

The CVE-2005-1644 entry documents a cross-site scripting (XSS) vulnerability in 1Two Livre d’Or 1.0’s guestbook.php. The vulnerability arises from unsanitized input through the parameters livreornom, livreoremail, and livreormessage, which allows remote attackers to inject arbitrary web script or...

CVE-2002-1644

The CVE-2002-1644 entry describes a local privilege-escalation flaw in SSH Secure Shell for Servers and SSH Secure Shell for Workstations, version 2.0.13 through 3.2.1, when run without a PTY. The root cause is that the process does not call setsid to detach the child from the parent’s process gr...

CVE-2004-1644

CVE-2004-1644 affects Xedus Peer-to-Peer webserver (Xedus 1.0). The vulnerability allows a remote attacker to cause a denial of service by opening multiple connections from the same IP, leading to the webserver refusing new connections. This is a network-based DoS with partial availability impact...

CVE-2004-1644

Xedus 1.0 allows remote attackers to cause a denial of service refuse connections by connecting multiple times from the same IP address...

CVE-2002-1644

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges...