CVE-2005-1895

CVE-2005-1895 describes a cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3. The issue allows remote attackers to inject arbitrary web script or HTML by supplying crafted values in the border or back parameters to (1) help.php or (2) footer.php. Affected software: FlatNuke 2.5.3. The ava...

CVE-2004-1895

CVE-2004-1895 affects YaST Online Update (YOU) in SuSE 8.2 and 9.0. The vulnerability enables local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies, indicating a local, user-privilege escalation risk (no remote access). The available sources explicitly describe the is...

CVE-2002-1895

The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service crash via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN...