CVE-2000-0861

Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %listname macro expansion...

CVE-2000-0853

YaBB Bulletin Board vulnerability (CVE-2000-0853) affects YaBB.pl: an input validation flaw in the file parameter (num) allows remote attackers to read arbitrary server files via path traversal (e.g., ../../../../../../../../etc/passwd%00) and the .txt suffix handling. This enables reading files ...

CVE-2000-0252

The CVE-2000-0252 entry concerns the Dansie Shopping Cart (cart.pl/cart.cgi). An input in a form variable allows remote command execution through shell metacharacters, due to insufficient input sanitization. This yields the potential for arbitrary commands to be run on affected systems. Public re...

CVE-2000-1050

Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in the beginning of the request aka the "extra leading slash"...

CVE-2000-1051

CVE-2000-1051 describes a directory traversal vulnerability in Allaire JRun 2.3 server where an attacker can read arbitrary files via the SSIFilter servlet. Affected software is Allaire JRun 2.3 server; the underlying flaw is in the SSIFilter servlet handling that allows path traversal. The NVD m...

CVE-2000-0783

Watchguard Firebox II is affected by CVE-2000-0783 where a remote attacker can cause a denial of service by sending a malformed URL to the authentication service on port 4100. The available sources (NVD, CVE list) describe the vulnerable component as the authentication service and the trigger via...

CVE-2000-1010

Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format characters...

CVE-2000-0542

Technical details about CVE-2000-0542 are not provided in the connected documents. The available sources list the issue as improper Radius accounting after failed login but no public exploit, patch, or affected versions are detailed here. Monitor for updates.

CVE-2000-0860

The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...

CVE-2000-0869

CVE-2000-0869: The default Apache 1.3.12 configuration on SuSE Linux 6.4 enables WebDAV, allowing remote attackers to list arbitrary directories via the PROPFIND method. This results in information disclosure about directory structure. The issue is tied to the WebDAV module being active by defaul...

CVE-2000-1016

The CVE-2000-1016 entry concerns the default Apache httpd.conf alias on SuSE 6.4 that exposes /usr/doc via /doc/packages, enabling remote read of package documentation and system configuration information. The vulnerability is an information disclosure in the web server configuration, with the af...

CVE-2000-0942

CVE-2000-0942 affects the CiWebHitsFile component of Microsoft Indexing Services for Windows 2000. The vulnerability allows remote attackers to perform a cross-site scripting (XSS) attack via a CiRestriction parameter in a .htw request. The NVD/connected records confirm the impact as a partial co...

CVE-2000-0296

The CVE-2000-0296 entry documents a local privilege-escalation flaw in fcheck, where embedding shell metacharacters in file names processed by fcheck can allow a local user to gain higher privileges. The description and connected records confirm the affected component is fcheck, with the underlyi...

CVE-2000-0254

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables...

CVE-2000-0944

The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...

CVE-2000-0928

CVE-2000-0928 affects WQuinn QuotaAdvisor 4.1. The vulnerability allows users to list directories and files by running a report on targeted shares, exposing partial confidentiality. The root cause/details beyond this description are not provided in the connected documents. CVSS base score is 2.1 ...

CVE-2000-0925

The CVE-2000-0925 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). The available documents state that the default installation creates a _private directory with world-readable permissions, which allows remote attackers to obtain sensitive information. No further technical specific...

CVE-2000-0923

CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...

CVE-2000-1070

Poll It 2.01 and earlier are affected by CVE-2000-1070 due to pollit.cgi using data files located under the web document root. This configuration permits remote attackers to access sensitive or private information. The provided documents do not specify affected versions beyond 2.01 and earlier, n...

CVE-2000-0975

CVE-2000-0975 describes a directory-traversal flaw in the Anaconda Foundation Directory’s apexec.pl, enabling remote attackers to read arbitrary files via a …/ path. Public documentation (NVD/NIST) lists a CVSSv2 base score of 5.0 (Network attack, low complexity, no authentication, partial confid...