CVE-2002-1704

Zeroboard 4.1 is affected when allow_url_fopen and register_globals are enabled. The vulnerability allows remote code execution by altering the _zb_path parameter to reference a URL on a remote server containing the attacker’s PHP code. The provided sources describe the affected product and the i...

CVE-2002-1729

CVE-2002-1729 describes a cross-site scripting (XSS) vulnerability in ASPjar Guestbook 1.00. The flaw occurs in the guestbook message handling when the user-supplied parameter (the "web site" field) is not properly sanitized, allowing remote attackers to execute arbitrary script as other users. D...

CVE-2002-1730

CVE-2002-1730 affects ASPjar Guestbook 1.00, where remote attackers can delete arbitrary messages by accessing the delete.asp administrative script with certain cookie values set to "true". The vulnerability is documented in the CVE entry and is referenced by NVD entries and CVE lists. The core i...

CVE-2002-1681

Technical details beyond the basic XSS description are not provided in the connected documents. No additional specifics (affected versions, root cause, impact or fixes) are available here. Monitor for updates from official advisories.

CVE-2002-1695

CVE-2002-1695 affects Norton Internet Security 2001. The issue stems from the product opening log files with FILE_SHARE_READ and FILE_SHARE_WRITE, which could allow remote attackers to modify log contents while Norton Internet Security is running. The provided documents do not include a remediati...

CVE-2002-1746

Affected software: Vtun 2.5b1. The CVE describes that remote attackers can inject data into user sessions by sniffing and replaying packets, enabling data injection into sessions. The provided documents do not specify a fix or patch version. No explicit exploitation details beyond the sniffing/re...

CVE-2002-1782

The CVE-2002-1782 entry concerns the University of Washington IMAP daemon (wu-imapd). In default configurations on systems that deny shell access, an authenticated IMAP user can read arbitrary files as that user. This is supported by multiple connected sources (OpenVAS/Nessus entries) describing ...

CVE-2002-1673

The CVE-2002-1673 issue affects Webmin 0.92: the web interface fails to properly quote/filter script code in files shown to the interface, enabling local users to run scripts and potentially steal cookies by inserting script into files or fields such as a real user name entry in /etc/passwd. The ...

CVE-2002-1754

CVE-2002-1754: Buffer overflow in Novell NetWare Client 4.80–4.83 can crash the client when resolving a very large hostname, triggered by local user actions (e.g., ping/traceroute). Affected: NetWare Client 4.80–4.83. Root cause: buffer overflow in hostname resolution. Impact: local denial of ser...

CVE-2002-1726

CVE-2002-1726 affects PhotoDB 1.4, specifically the secure_inc.php component. The vulnerability allows remote authentication bypass by constructing a URL with a large Time parameter, a non-empty rmtusername and rmtpassword, and an accesslevel lower than the requested page’s level. The CVSS-based ...

CVE-2002-1686

Technical details for CVE-2002-1686 are not publicly available in the provided documents; no affected product/version or impact is disclosed. Monitor for updates.

CVE-2002-1742

CVE-2002-1742 affects SOAP::Lite 0.50–0.52. Remote attackers can exploit a non-existent function in a SOAP::Lite script to trigger AUTOLOAD and load arbitrary Perl functions. Affected: SOAP::Lite 0.50–0.52. Impact: as described in sources, potentially enabling arbitrary function execution; extern...

CVE-2002-1705

CVE-2002-1705 concerns Microsoft Internet Explorer 5.5 through 6.0, where a remote attacker could cause a denial of service (crash) by supplying a Cascading Style Sheet that uses the p{cssText} element declared with a bold font weight. Affected product family is Internet Explorer; the root cause ...

CVE-2002-1727

CVE-2002-1727 is a cross-site scripting (XSS) vulnerability in the askSam Web Publisher 1 and 4 products, specifically in the executables as_web.exe and as_web4.exe . The issue allows remote attackers to execute arbitrary script in the context of other users by supplying a crafted URL. The vulner...

CVE-2002-1678

The CVE-2002-1678 entry describes a Cross-site scripting (XSS) vulnerability in Jelsoft’s vBulletin 2.0 rc2 through 2.2.4, specifically in memberlist.php, allowing remote attackers to steal authentication credentials by injecting a/script into $letterbits. Affected software is Jelsoft vBulletin 2...

CVE-2002-1778

CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...

CVE-2002-1770

Qualcomm Eudora 5.1 is affected. The vulnerability allows remote code execution via an HTML e-mail that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript, which is launched and executed in the My Computer zone by Internet Explorer. The pr...

CVE-2002-1702

CVE-2002-1702 is a cross-site scripting vulnerability in DeltaScripts PHP Classifieds 6.0.5 that allows remote attackers to execute arbitrary script as other users via the URL parameter. Documented impacts include potential integrity compromise with no confidentiality or availability impact per N...

CVE-2002-1732

Actinic Catalog 4.7.0 is affected by multiple XSS vulnerabilities (CVE-2002-1732). The issues allow remote attackers to inject arbitrary web script or HTML via: (1) query string arguments to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) the PRODREF parameter to ss000007.pl, or ...

CVE-2002-1691

CVE-2002-1691 affects the Alcatel OmniPCX 4400. The vulnerability arises because known user accounts and passwords are installed in the /etc/password file by default, enabling remote attackers to gain unauthorized access. The available sources corroborate the default-credentials issue and the res...