5356 matches found
CVE-2002-0934
Directory traversal vulnerability in Jon Hedley AlienForm2 typically installed as af.cgi or alienform.cgi allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. dot dot sequence in the parameters 1 browserout or 2 outfile...
CVE-2002-0837
wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to 1 execute arbitrary code or 2 conduct cross-site scripting attacks via certain parameters possibly "dict" to the wordtrans.php script...
CVE-2002-0899
Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . dot...
CVE-2002-0919
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...
CVE-2002-0944
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the 1 user-agent or 2 referrer, which are not filtered by the stats program...
CVE-2002-0958
Cross-site scripting vulnerability in browse.php for PHPReactor 1.2.7 allows remote attackers to execute script as other users via the go parameter in the comments section...
CVE-2002-0961
Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack...
CVE-2002-0997
Buffer overflows in IMAP Agent imapd for Novell NetMail NIMS 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service...
CVE-2002-0999
Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations...
CVE-2002-1013
Buffer overflow in trafficmanager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argument...
CVE-2002-1014
Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image...
CVE-2002-1036
Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine FDSE before 2.0.0.0055 allows remote attackers to execute web script via the 1 Rank or 2 Match parameters...
CVE-2002-1042
Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...
CVE-2002-1043
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service crash via a malformed Subject "\t\t"...
CVE-2002-1104
Cisco Virtual Private Network VPN Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service crash via TCP packets with source and destination ports of 137 NETBIOS...
CVE-2002-1115
Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the fid bug ID parameter to 1 bugupdateadvancedpage.php, 2 bugupdatepage.php, 3 viewbugadvancedpage.php, or 4 viewbugpage.php...
CVE-2002-1135
modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an incprefix parameter that points to the malicious code...
CVE-2002-0664
The default Access Control Lists ACLs of the administration database for ZMerge 4.x and 5.x provides arbitrary users including anonymous users with Manager level access, which allows the users to read or modify import/export scripts...
CVE-2002-0889
Buffer overflow in Qpopper popper 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file...