CVE-2008-1696

The CVE-2008-1696 entry describes a directory traversal vulnerability in makepost.php of DaZPHPNews 0.1-1. Exploitation requires register_globals enabled and magic_quotes_gpc disabled, allowing an attacker to include and execute arbitrary local files by injecting dots (..) in the prefixdir parame...

CVE-2008-1696

creationtimestamp| type| source ---|---|--- 2008-04-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5347...

CVE-2007-1696

CVE-2007-1696 describes a SQL injection in ViewNewspapers.asp for Active Newsletter 4.3 and earlier. The vulnerability is triggered via the NewsPaperID parameter, allowing remote attackers to execute arbitrary SQL commands. The affected component is the ViewNewspapers.asp page within the Active N...

CVE-2004-1696

EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service application crash via a sequence of carriage returns sent to TCP port 66...

CVE-2002-1696

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted...