CVE-2002-1467

CVE-2002-1467 affects the Macromedia Flash Plugin prior to 6.0.47.0, allowing remote attackers to bypass the same-domain restriction and read arbitrary files via (1) HTTP redirects, (2) a file:// base in a web document, or (3) a relative URL from a web archive (mht). The primary sources in the pr...

CVE-2002-1536

The CVE-2002-1536 entry concerns Molly IRC bot 0.5. Affected components are multiple Perl scripts: nslookup.pl (host variable), pop.pl (to, from, message), sms.pl (words, text), and hpled.pl (server, printer). The root cause is shell metacharacter handling in these variables, enabling a remote at...

CVE-2002-1475

HP Tru64 UNIX ARP component (versions 4.0f, 4.0g, 5.0a) is described as having an unknown vulnerability that allows remote attackers to take over packets destined for another host and cause a denial of service. The available sources do not provide concrete technical details such as root cause, sp...

CVE-2002-1464

Cross-site scripting XSS vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable...

CVE-2002-1460

CVE-2002-1460 affects L-Forum 2.40 and earlier. The issue is improper verification of uploaded files and associated POST variables (attachment, attachment_name, attachment_size, attachment_type), enabling remote attackers to read arbitrary files. The connected documents confirm the affected softw...

CVE-2002-1451

The vulnerability CVE-2002-1451 affects the Blazix web server (Java-based) prior to version 1.2.2. An HTTP request that ends with a "+" or a backslash "\" can disclose the JSP source code or list restricted directories, enabling partial disclosure of sensitive data. The threat is described as rem...

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup...

CVE-2002-1439

CVE-2002-1439 describes a stack corruption issue in the TGA daemon used by HP-UX 11.04 (VVOS) Virtualvault, affecting versions 4.0, 4.5, and 4.6. The vulnerability may allow an attacker to obtain access to system files. The public sources provided do not specify a vendor, exploit details, specifi...

CVE-2002-1439

Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 VVOS Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files...

CVE-2002-1461

Web Shop Manager 1.1 is affected by CVE-2002-1461: remote attackers can execute arbitrary commands by supplying shell metacharacters in the search box. Root cause is improper input handling in the search functionality leading to command execution. CVSS shows AV:N/AC:L/Au:N/C:P/I:P/A:P with a base...

CVE-2002-1409

CVE-2002-1409 affects HP-UX 11.00 through 11.11, where ptrace handling allows a local user to trigger a denial-of-service (data page fault panic) via an incorrect reference to thread register state. The available documents confirm the affected platform and the root cause (ptrace thread-state refe...

CVE-2002-1426

CVE-2002-1426 affects the HP ProCurve Switch 4000M (firmware version C.07.23). The vulnerability allows remote attackers to cause a denial of service (crash) by sending an SNMP write request containing 85 characters, which may trigger a buffer overflow. The connected documents provide the impact ...

CVE-2002-1429

The CVE-2002-1429 entry corresponds to a cross-site scripting (XSS) vulnerability in endity.com’s ShoutBOX, specifically in the board.php handler. The flaw allows remote attackers to inject arbitrary HTML into the shoutbox page by manipulating the site parameter. Documents confirm the affected co...

CVE-2002-1456

Affects: mIRC up to version 6.0.2 (and earlier). A buffer overflow occurs in scripting via a long $asctime value, enabling remote code execution. The linked sources (NVD entry and Nessus plugin 1863.prm) indicate the issue resides in the mIRC 6.x line prior to a fixed version, with the Nessus plu...

CVE-2002-1481

The CVE-2002-1481 entry concerns phpGB versions 1.20 and earlier where savesettings.php allows unauthenticated remote modification of config.php. The root cause is lack of authentication on savesettings.php, enabling an attacker to alter configuration and potentially cause a denial of service or ...

CVE-2002-1488

CVE-2002-1488 affects the IRC component of Trillian in versions 0.73 and 0.74. The issue allows remote malicious IRC servers to cause a denial of service (crash) by sending a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in. This is a network-vector impact...

CVE-2002-1428

CVE-2002-1428 affects dotProject 0.2.1.5 (index.php). The vulnerability allows remote attackers to bypass authentication by manipulating a cookie or the URL parameter user_cookie set to 1, enabling unauthorized access to protected areas. The documents do not provide exploit details, affected vers...

CVE-2002-1480

Cross-site scripting XSS vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry...

CVE-2002-1546

BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence...

CVE-2002-1410

Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to 1 delete entries via direct access of admin.cgi, or 2 reconfigure Guestbook via direct access of config.cgi...