CVE-2002-2074

CVE-2002-2074 is an SQL injection vulnerability in Mailidx prior to 20020105. According to NVD, it allows remote attackers to execute arbitrary SQL commands via the search web page, with a base CVSS v2 score of 7.5 (HIGH) and network vector. Affected product/version detail is Mailidx before 20020...

CVE-2002-2076

CVE-2002-2076 pertains to the Lil’ HTTP server (versions 2.1 and 2.2). The connected sources confirm a directory traversal vulnerability that allows remote attackers to read arbitrary files by including a .. (dot dot) in an HTTP GET request. The root cause is input/path traversal handling in the ...

CVE-2002-2083

CVE-2002-2083 : The vulnerability affects the Novell Netware client running on Windows 95. Local users can bypass login and open arbitrary files via the "What is this?" help feature accessible from the Netware login screen. The connected documents do not provide details on affected versions beyon...

CVE-2002-2073

Cross-site scripting (XSS) vulnerability in Microsoft Site Server 3.0 for Windows NT 4.0 affects the default ASP page Default.asp (ctr parameter) and formslogin.asp (query string). The issue allows remote attackers to inject arbitrary web scripts or HTML. Root cause is insufficient sanitization o...

CVE-2002-2060

CVE-2002-2060 affects Links 2.0 pre4. The vulnerability is a buffer overflow in the PNG gamma table handling (large 16-bit PNG images), allowing remote network-triggered crashes and potential arbitrary code execution in affected client browsers. Connected sources confirm the same description acro...

CVE-2002-1990

Vulnerability summary: CVE-2002-1990 affects Resin 2.0.5 through 2.1.2. The issue allows remote attackers to reveal physical path information by requesting the example Java class HelloServlet, enabling partial information disclosure. The available sources (NVD/Red Hat/CVE listings) confirm the af...

CVE-2002-2003

The CVE-2002-2003 entry affects Compaq Tru64 systems: ypbind on Tru64 4.0F/4.0G/5.0A/5.1/5.1A allows a remote attacker to trigger a core dump by sending specific network packets generated by nmap. The connected records corroborate the core-dump impact and the network-based trigger across multiple...

CVE-2002-2035

RealityScape MyLogin 2000 1.0.0 and earlier is affected by a SQL injection vulnerability in the login form (Username and Password fields). The issue allows remote attackers to manipulate SQL commands executed by the application, enabling potential unauthorized access or data exposure. The availab...

CVE-2002-2020

The CVE-2002-2020 entry concerns Netgear RP114 Cable/DSL Web Safe Router with Firmware 3.26. According to the provided documents, the vulnerability arises from a default administrator password and the acceptance of admin logins on the external interface, enabling remote attackers to gain privileg...

CVE-2002-2010

CVE-2002-2010: The htsearch.cgi component of ht://Dig (htdig) versions 3.1.5, 3.1.6, and 3.2 is vulnerable to cross-site scripting (XSS) via the words parameter. An attacker can supply crafted input in the words parameter to cause arbitrary web script or HTML to be injected and executed in a vict...

CVE-2002-2021

Cross-site scripting XSS vulnerability in WoltLab Burning Board wbboard 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2002-2035

SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password in the login form...

CVE-2002-2062

Cross-site scripting XSS vulnerability in ftp.htt in Internet Explorer 5.5 and 6.0, when running on Windows 2000 with "Enable folder view for FTP sites" and "Enable Web content in folders" selected, allows remote attackers to inject arbitrary web script or HTML via the hostname portion of an FTP...

CVE-2002-2082

CVE-2002-2082 affects FTGate and FTGate Pro 1.05. The issue allows a remote attacker to lock other users’ mailboxes before authentication succeeds, representing a denial of service on mailbox access. Reports in Red Hat and CVE records reiterate that a pre-authentication mailbox lock is possible, ...

CVE-2002-1992

The CVE-2002-1992 entry concerns ColdFusion MX: a buffer overflow in jrun.dll when ColdFusion runs with IIS 4/5, enabling remote denial of service via either a long template file name or a long HTTP header. Affected software is ColdFusion MX (jrun.dll) on IIS environments. The underlying cause is...

CVE-2002-1991

The CVE-2002-1991 entry describes a PHP file inclusion vulnerability in osCommerce 2.1, exploitable via the include_file parameter to include_once.php to execute arbitrary commands. Affected component: include_once.php in osCommerce 2.1. Impact is indicated as partial confidentiality/integrity/av...

CVE-2002-2054

CVE-2002-2054 affects TeeKai Forum 1.2. Remote attackers can authenticate as the administrator and gain privileged web forum access by setting the valid_level cookie to admin. Exploitation details are not expanded in the provided documents beyond cookie manipulation; no remediation steps are spec...

CVE-2002-2004

CVE-2002-2004 affects the portmapper service in Compaq Tru64 operating system versions 4.0G and 5.0A. The root issue described in the connected records is a denial-of-service condition triggered by a flood of packets sent to the portmapper, exploitable remotely without authentication. This vulner...

CVE-2002-2004

portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets...

CVE-2002-2029

PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string...