106 matches found
CVE-2007-1964
The CVE-2007-1964 issue affects MyBB (MyBulletinBoard) via member.php. When debug mode is enabled, remote authenticated users can change any account’s password by sending a do_lostpw request with the target’s registered email, and the debug output prints the change-password verification code. Acc...
CVE-2006-1964
CVE-2006-1964 describes an SQL injection in Haberler.asp (ASPSitem 1.83 and earlier). The vulnerability is triggered via the id parameter and allows a remote attacker to execute arbitrary SQL commands. Exploitation details are not provided beyond the vulnerability description; CVSS metrics indica...
CVE-2005-1964
CVE-2005-1964 is a PHP remote file inclusion (RFI) vulnerability affecting Ovidentia Portal (Cantico Ovidentia 5.8.0 as cited). The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted babInstallPath URL parameter, targeting utilit.php. Related entries (CVE-2006-2811)...
CVE-2005-1964
PHP remote file inclusion vulnerability in utilit.php for Ovidentia Portal allows remote attackers to execute arbitrary PHP code via the babInstallPath parameter...
CVE-2004-1964
The CVE-2004-1964 entry describes a Cross-site Scripting (XSS) vulnerability in Network Query Tool (NQT) 1.6, specifically in nqt.php where the portNum parameter can be abused to inject arbitrary web script or HTML. Affected component: Network Query Tool (NQT) 1.6; vulnerability type: XSS; root c...