1397 matches found
CVE-2005-0842
CVE-2005-0842 involves a cross-site scripting (XSS) vulnerability in Kayako eSupport version 2.3. The flaw occurs in index.php via the parameters _i and _c, allowing remote attackers to inject arbitrary web script or HTML in a victim’s browser. The public description does not specify a fix or aff...
CVE-2005-0678
PHP remote file inclusion vulnerability in formmail.inc.php for Form Mail Script 2.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the scriptroot to reference a URL on a remote web server that contains the code...
CVE-2005-0107
bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...
CVE-2004-2579
ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding."...
CVE-2004-0293
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. dot dot in a HTTP request to 1 gotopage.cgi or 2 genindexpage.cgi...
[Full-Disclosure] [HV-MED] Zip/Linux long path buffer overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Zip/Linux long path buffer overflow Classification: =============== Level: low-MED-high-crit ID: HEXVIEW200411031 URL: http://www.hexview.com/docs/20041103-1.txt Overview: ========= Zip console application by Info-Zip http://www.info-zip.org is an...
BadBlue < 2.3 ISAPI Extension Administrative Actions Bypass
Binary data 1500.prm...
National Science Foundation Squid Proxy 2.3 - Internet Access Control Bypass
source: https://www.securityfocus.com/bid/10315/info Squid proxy has been reported to be affected by an Internet access control bypass vulnerability. This issue is caused by a failure of the application to properly handle access controls when evaluating malformed URI requests. This issue is...
ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access
ShopCartCGI 2.3 - genindexpage.cgi Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful...
ShopCartCGI 2.3 - 'gotopage.cgi' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/9670/info It has been reported that ShopcartCGI is prone to a remote file disclosure vulnerability. This issue is due to insufficient validation of user-supplied input. Upon successful exploitation of this issue an attacker may be able to gain access to...
CVE-2003-1402
PHP remote file inclusion vulnerability in hit.php for Kietu 2.0 and 2.3 allows remote attackers to execute arbitrary PHP code via the urlhit parameter, a different vulnerability than CVE-2006-5015...
CVE-2002-0495
csSearch.cgi in csSearch 2.3 and earlier contains a remote command‑execution flaw. An attacker can trigger arbitrary Perl code by using the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file loaded by csSearch.cgi. This yields remote, user‑independent com...
Kietu ( PHP )
Informations : °°°°°°°°°°°°°° Website : http://kietu.free.fr Version : 2.0, 2.3 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° hit.php : ------------------------------------------------------------------ if !getcfgvar"registerglobals" $kietu"remoteaddr" =...
CVE-2002-2049
configure for Dsniff 2.3, fragroute 1.2, and fragrouter 1.6, when downloaded from monkey.org on May 17, 2002, has been modified to contain a backdoor, which allows remote attackers to access the system...
CVE-2002-2044
Cross-site scripting XSS vulnerability in xstatadmin.php in x-stat 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to the phpinfo action...
CVE-2002-0741
psyBNC 2.3 allows remote attackers to cause a denial of service CPU consumption and resource exhaustion by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC...
CVE-2002-0197
Technical details (affected products, versions, vulnerabilities, exploitation) are not publicly provided in the connected documents. Monitor for updates.
psyBNC <= 2.3 Denial of Service Exploit
No description provided by source. / psyBNC include include include include include include include include include string...
psyBNC 2.3 - Denial of Service
/ psyBNC include include include include include include include include include define SIZE 9000 define PORT 31337 define USER "pr0ix" int senddosint port, int size, char target, char user; int checkvuln...