CVE-2002-1456

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value...

CVE-2002-1429

Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter...

CVE-2002-1466

CafeLog b2 Weblog Tool 2.06pre4, with allowfopenurl enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable...

CVE-2002-1481

savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php...

CVE-2002-1450

IBM UniVerse with UV/ODBC allows attackers to cause a denial of service client crash or server CPU consumption via a query with an invalid link between tables, possibly via a buffer overflow...

CVE-2002-1452

Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter...

CVE-2002-1454

MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message...

CVE-2002-1487

The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service crash by sending the raw messages 1 206, 2 211, 3 213, 4 214, 5 215, 6 217, 7 218, 8 243, 9 302, 10 317, 11 324, 12 332, 13 333, 14 352, and 15 367...

CVE-2002-1487

The CVE-2002-1487 entry concerns the IRC component of Trillian versions 0.73 and 0.74. The vulnerability allows remote malicious IRC servers to cause a denial of service (crash) by sending any of the 15 specified raw messages (numbers 206, 211, 213, 214, 215, 217, 218, 243, 302, 317, 324, 332, 33...

CVE-2002-0690

McAfee Security ePolicy Orchestrator (ePO) 2.5.1 is affected by CVE-2002-0690, a format-string vulnerability in the HTTP GET request path that can allow remote code execution with SYSTEM privileges. The issue stems from processing of network requests (port 8081) and can enable arbitrary code exec...

CVE-2002-1440

CVE-2002-1440 : The Gateway GS-400 server ships with a default root password “0001n” that cannot be changed via the administrative interface, enabling an attacker to obtain root privileges. The available documents confirm the existence of this default credential and the associated privilege escal...

CVE-2002-1422

The CVE-2002-1422 issue affects FUDforum prior to 2.2.0. Vulnerable component: admbrowse.php. Root cause: the cur and dest parameters allow URL-encoded pathnames to be used in a way that enables remote attackers to create or delete files. Impact: file creation/deletion via the web interface, with...

CVE-2002-1457

CVE-2002-1457 targets L-Forum 2.40. It describes a SQL injection in search.php via the search parameter that could allow remote attackers to execute arbitrary SQL statements. The connected documents confirm the affected software (L-Forum 2.40) and the vulnerable component (search.php) with the un...

CVE-2002-1482

This CVE (CVE-2002-1482) affects phpGB 1.20 and earlier. The connected NVD entry describes a SQL injection in login.php when magic_quotes_gpc is not enabled, allowing remote attackers to gain administrative privileges via SQL in the password entry. The vulnerability is rated with base score 10.0 ...

CVE-2002-1460

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...

CVE-2002-1546

The CVE-2002-1546 issue affects BRS WebWeaver Web Server 1.01 and allows remote attackers to bypass password protections for files and directories by sending an HTTP request that includes a "/./" sequence. This is a path traversal-like bypass vulnerability. According to the source data, the vulne...

CVE-2002-1458

CVE-2002-1458 is a cross-site scripting vulnerability in L-Forum 2.40 and earlier when the option “Enable HTML in messages” is enabled. The vulnerability allows remote attackers to inject arbitrary script or HTML via message fields such as From, E-Mail, Subject, and Body . The NVD entry assigns a...

CVE-2002-1486

CVE-2002-1486 affects Trillian's IRC component (versions 0.73 and 0.74). The issue consists of multiple buffer overflows that allow a remote IRC server to cause denial of service and potentially execute arbitrary code. Exploitation vectors include: (1) a large response from the server, (2) a JOIN...

CVE-2002-1411

Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System DPGS 0.99.4 allows remote attackers to read arbitrary files via .. dot dot sequences in the id parameter...

CVE-2002-1444

The CVE-2002-1444 entry concerns Google Toolbar 1.1.60 running in Internet Explorer 5.5/6.0. Affected component: Google Toolbar HTML/ActiveX handling. Root cause: the vulnerability enables remote attackers to cause a denial of service (crash) through malicious HTML, with possible involvement of s...