CVE-2000-0254

The dansie shopping cart application cart.pl allows remote attackers to obtain the shopping cart database and configuration information via a URL that references either the env, db, or vars form variables...

CVE-2000-0944

The CVE-2000-0944 issue affects CGI Script Center News Update 1.1. The vulnerability is in the password change flow where the original news administration password is not properly validated, enabling remote attackers to modify the password without knowing the original. Impact is unauthenticated r...

CVE-2000-0928

CVE-2000-0928 affects WQuinn QuotaAdvisor 4.1. The vulnerability allows users to list directories and files by running a report on targeted shares, exposing partial confidentiality. The root cause/details beyond this description are not provided in the connected documents. CVSS base score is 2.1 ...

CVE-2000-0925

The CVE-2000-0925 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). The available documents state that the default installation creates a _private directory with world-readable permissions, which allows remote attackers to obtain sensitive information. No further technical specific...

CVE-2000-0923

CVE-2000-0923 concerns the authenticate.cgi CGI in Aplio PRO, where remote attackers can execute arbitrary commands by injecting shell metacharacters into the password parameter. The entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, low attack complexity, and no authentication. ...

CVE-2000-1070

Poll It 2.01 and earlier are affected by CVE-2000-1070 due to pollit.cgi using data files located under the web document root. This configuration permits remote attackers to access sensitive or private information. The provided documents do not specify affected versions beyond 2.01 and earlier, n...

CVE-2000-0975

CVE-2000-0975 describes a directory-traversal flaw in the Anaconda Foundation Directory’s apexec.pl, enabling remote attackers to read arbitrary files via a …/ path. Public documentation (NVD/NIST) lists a CVSSv2 base score of 5.0 (Network attack, low complexity, no authentication, partial confid...

CVE-2000-0938

Samba SWAT (Web Administration Tool) shipped with Samba 2.0.7 is vulnerable to username enumeration: SWAT returns different error messages for valid vs. invalid usernames, enabling remote attackers to identify valid users on the server. This is evidenced by multiple sources in the CVE ecosystem (...

CVE-2000-1031

Technical details of CVE-2000-1031 are not publicly provided in the supplied documents; monitor for updates.

CVE-2000-0276

BeOS 4.5 and 5.0 allow local users to cause a denial of service via malformed direct system calls using interrupt 37...

CVE-2000-1034

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability...

CVE-2000-1148

The CVE-2000-1148 entry concerns VolanoChatPro server where configuration file permissions are world-readable and administrator passwords are stored in plaintext. This insecure configuration can allow local users to access sensitive credentials and potentially gain privileges on the server. The v...

CVE-2000-1068

The CVE-2000-1068 entry concerns Poll It 2.0: the pollit.cgi component is vulnerable to remote command execution via shell metacharacters supplied in the poll_options parameter. The underlying issue is improper handling of user-supplied input in that parameter, enabling an attacker to execute arb...

CVE-2000-1131

CVE-2000-1131 concerns Bill Kendrick’s web site guestbook (GBook), where remote Command Execution is possible via shell metacharacters in the _MAILTO form variable. The vulnerability stems from improper handling of user-supplied input, enabling arbitrary commands to be run on the server. Reported...

CVE-2000-1005

The CVE-2000-1005 entry concerns directory traversal in eXtropia WebStore CGI scripts (html_web_store.cgi and web_store.cgi). An attacker can read arbitrary files by supplying a .. (dot dot) path in the page parameter, enabling remote file disclosure. The vulnerability is evidenced by multiple so...

CVE-2000-0111

The CVE-2000-0111 entry concerns the RightFax web client, where predictable session numbers can enable an attacker to hijack user sessions. Affected product: RightFax web client. Root cause: session identifiers are predictable, allowing session hijacking without additional authentication. Impact:...

CVE-2000-0952

CVE-2000-0952 affects the Global CGI program, specifically global.cgi, in Global 3.55 and earlier on NetBSD. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in input handled by the CGI. Root cause: improper handling of shell input leading to comman...

CVE-2000-0943

CVE-2000-0943 describes a buffer overflow in the bftpd daemon (bftp) version 1.0.11 that can be triggered remotely by a very long USER command. The vulnerability can cause a denial of service and may allow execution of arbitrary commands on the server. Affected product evidence includes Nessus re...

CVE-2000-0926

The CVE-2000-0926 entry concerns SmartWin CyberOffice Shopping Cart 2 (CyberShop). Vulnerability: remote attackers can modify price information by altering the hidden Price form variable. Affected component: the shopping cart/web interface that processes the Price field. Impact: data integrity co...

CVE-2000-0977

The CVE-2000-0977 issue affects MailFile 1.10 via mailfile.cgi, where a remote attacker can read arbitrary files by supplying a target filename in the POST parameter and having it emailed to the address in the email parameter. The underlying cause is improper handling of the filename parameter in...