CVE-2002-2290

Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges...

CVE-2002-2299

Thatware versions 0.3 through 0.5.2 are affected by a PHP remote file inclusion vulnerability. The flaw allows remote attackers to execute arbitrary PHP code via the root_path parameter, enabling code execution on the server. The affected component is thatfile.php in Thatware, and exploitation le...

CVE-2002-2297

Technical details about CVE-2002-2297 are not publicly available in the provided connected documents. Monitor for updates for any affected software, versions, impact, or remediation information.

CVE-2002-2277

PortailPHP 0.99 contains an SQL injection in mod_search/index.php. The vulnerability allows remote attackers to inject SQL via (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin, potentially affecting confidentiality, integrity, and availability as i...

CVE-2002-2278

CVE-2002-2278 is a cross-site scripting (XSS) vulnerability in PortailPHP 0.99, specifically in mod_search/index.php. The issue arises from injecting arbitrary web script or HTML via six user-controllable variables: $App_Theme, $Rub_Search, $Rub_News, $Rub_File, $Rub_Liens, and $Rub_Faq. The prov...

CVE-2002-2267

CVE-2002-2267 affects bogofilter 0.9.0.4 through a symlink attack on the bogopass temporary file, enabling local users to overwrite arbitrary files. Root cause: symlink race allowing file overwrite. Impact: local privilege/ integrity concerns as described (no public details on exploits). Remediat...

CVE-2002-2261

CVE-2002-2261 affects Sendmail versions 8.9.0–8.12.6. The flaw allows remote attackers to bypass relaying restrictions enforced by the check_relay function by spoofing a blank DNS hostname. Root cause is related to how the relay check handles DNS hostnames, enabling unauthorized relaying. No expl...

CVE-2002-2285

Vulnerability summary: In eTrust InoculateIT 6.0, enabling the "Incremental Scan" option may certify a file as virus-free before it is fully downloaded, allowing a bypass of virus detection. Affected product/version: eTrust InoculateIT 6.0. Root cause / behavior: premature virus validation during...

CVE-2002-2303

3D3.Com ShopFactory 5.8 is affected by a vulnerability where client-side encryption and decryption of sensitive price data enables remote attackers to modify shopping cart prices by using JavaScript to decrypt the cookie containing the data. This indicates a weakness in where price data is stored...

CVE-2002-2290

CVE-2002-2290 affects Mambo Site Server 4.0.11, where a default username/password of admin enables remote attackers to gain privileges. The description across sources repeats that a default credential leads to privilege escalation, but no concrete exploit vectors or patched versions are provided ...

CVE-2002-2298

Thatware prior to version 0.5.3 is affected by a PHP remote file inclusion vulnerability in config.php, exploitable via the root_path parameter. This allows an attacker to potentially execute arbitrary PHP code on the server. Affected versions: 0.3 through 0.5.3. The vulnerability is described in...

CVE-2002-2282

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for specific DLLs in the user’s home directory even while browsing the local hard drive, enabling local users to run arbitrary code through malicious DLLs. This is described as a local-privilege impact with potential comple...

CVE-2002-2266

CVE-2002-2266 affects NetScreen ScreenOS versions 2.8 through 4.0. The issue occurs when forwarding H.323 or Netmeeting traffic, where remote attackers can trigger a denial of service by establishing multiple half‑open H.323 sessions that are not cleaned up and do not time out for 36 hours, leadi...

CVE-2002-2273

CVE-2002-2273 : Cross-site scripting (XSS) in the Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. The provided documents do not specify affected versions, exact component, root cause details, or remediation steps. No exploitation details are include...

CVE-2002-2260

Vulnerability context (CVE-2002-2260) : Mozilla Bugzilla's quips feature is affected in versions 2.10–2.17, where an XSS vulnerability exists that lets remote attackers inject arbitrary script/HTML via the “show all quips” page. Several connected sources (including Debian’s DSA-218-1 and OpenVAS ...

CVE-2002-2305

The connected records confirm a concrete vulnerability: SQL injection in Immobilier’s agentadmin.php, exploitable via the (1) agentname or (2) agentpassword parameters. This allows remote attackers to execute arbitrary SQL commands. Per the CVSS data, impact includes partial confidentiality, part...

CVE-2002-2291

The CVE-2002-2291 entry affects Calisto Internet Talker 0.04 and earlier. The vulnerability is a remote denial-of-service risk caused by a long request that could trigger a buffer overflow in the affected component. No explicit exploitation details, affected versions beyond those listed, or remed...

CVE-2002-2293

CVE-2002-2293 concerns the Webshots Desktop screensaver, where local users can bypass the screensaver password by pressing CTRL-ALT-DELETE and either cancelling the dialog or terminating the screensaver process. The description in the provided records (NVD/CVE entries) confirms a local-privilege-...

CVE-2002-2276

Ultimate PHP Board (UPB) 1.0 exposes a path disclosure: a direct request to add.php allows remote attackers to view the physical path of the message board via the error message. This is a remote information-disclosure vulnerability (CVE-2002-2276). Exploitation details are described across multip...

CVE-2002-2262

CVE-2002-2262 describes an unspecified vulnerability in xntpd for HP-UX 10.20–11.11 that can be exploited remotely to cause a denial of service (hang) via unknown attack vectors. The NVD CVSS metrics indicate a network-exposed issue with low attack complexity and no authentication, yielding a Ava...