CVE-2003-1511

The vulnerability CVE-2003-1511 affects Bajie Java HTTP Server 0.95 through 0.95zxv4, where cross-site scripting (XSS) is possible via: (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet. The underlyin...

CVE-2003-1504

CVE-2003-1504 affects Goldlink 3.0 and is caused by a SQL injection in the variables.php component, enabling remote attackers to manipulate the database via the vadmin_login or vadmin_pass cookies in a request to goldlink.php. The vulnerability permits arbitrary SQL execution and comes with a Hig...

CVE-2003-1509

Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818–6.0.11.853 are affected by CVE-2003-1509. The issue allows remote attackers to execute arbitrary script in the local security zone by embedding a script in a temporary file before the temp file ...

CVE-2003-1480

Summary: CVE-2003-1480 concerns Oracle/MySQL Server versions 3.20–4.1.0 that use a weak password-hashing algorithm. The root cause is the weak hashing scheme used for passwords stored in mysql.user, which can allow an attacker who can read the table to brute-force and recover plaintext passwords....

CVE-2003-1493

CVE-2003-1493 affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. The issue is a memory leak in NNM that can be triggered by crafted TCP packets, leading to a denial of service via memory exhaustion. Exploitation status, affected platforms beyond 6.2/6.4, and a vendor patch/fix a...

CVE-2003-1494

The CVE-2003-1494 issue affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. A remote attacker can cause a denial of service via a crafted TCP packet, resulting in CPU consumption. The available documents describe the vulnerability and impact but do not provide a remediation or pa...

CVE-2003-1469

The CVE: CVE-2003-1469 affects Macromedia ColdFusion MX. The default configuration enables Robust Exception Information, which allows remote attackers to obtain the web server’s full path via a direct request to CFIDE/probe.cfm, leaking the path in an error message. Affected component is the CFID...

CVE-2003-1483

CVE-2003-1483 affects FlashFXP 1.4, where the password storage uses a weak encryption algorithm. The underlying issue is insecure password handling, enabling attackers to decrypt stored passwords and gain access. Public details consistently report this weakness without specifying exploitation sta...

CVE-2003-1485

The CVE-2003-1485 entry concerns Clearswift MAILsweeper versions 4.0–4.3.7, where remote attackers can bypass mail filtering by sending a file attachment that uses “multiple extensions combined with large blocks of white space.” The connected sources confirm the affected product family and the by...

CVE-2003-1467

CVE-2003-1467 covers multiple XSS flaws in Phorum prior to 3.4.3 affecting login.php, register.php, post.php, and common.php. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Affected software: Phorum (before 3.4.3). Underlying cause an...

CVE-2003-1465

Phorum 3.4–3.4.2 is affected by a directory traversal in download.php that allows remote attackers to read arbitrary files. The vulnerability arises from improper handling of file paths, enabling access to sensitive server files. No remediation or patch details are provided in the supplied docume...

CVE-2003-1472

The CVE-2003-1472 entry describes a buffer overflow in the 3D-FTP client 4.0. The vulnerability is triggered by a long banner sent by a remote FTP server over the network, leading to a denial of service (crash) and potentially arbitrary code execution. The available records consistently identify ...

CVE-2003-1474

CVE-2003-1474 concerns the FreeBSD Ports Collection component slashem-tty, which is reported to be installed with write permissions for the games group. The provided documents state that local users with games group privileges can modify slashem-tty and execute arbitrary code as other users, leve...

CVE-2003-1480

MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods...

CVE-2003-1476

CVE-2003-1476 affects Cerberus FTP Server 2.1. The provided documents describe a plaintext storage of usernames and passwords, which could allow local users to gain access. This disclosure aligns with a local-privilege concern but the connected sources do not provide explicit exploit vectors, imp...

CVE-2003-1478

CVE-2003-1478 affects Konqueror in KDE 3.0.3. A crafted web page that starts with a 0xFF 0xFE byte sequence and many CRLFs can trigger a denial of service (core dump). Documented example uses freeze.htm. The sources note the vulnerability and impact but do not provide patch/version details or exp...

CVE-2003-1492

CVE-2003-1492 affects Netscape Navigator 7.0.2 and Mozilla, where an HTTP request to a domain with a trailing dot can cause cross-domain cookie access. The connected ROSA advisory lists this CVE as Fixed and notes remediation as updating Firefox (DNF command reference: sudo dnf update firefox). T...

CVE-2003-1463

CVE-2003-1463 describes an absolute path traversal flaw in Alt-N Technologies WebAdmin 2.0.0–2.0.2. With administrator privileges, an attacker can (1) determine the installation path by reading the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter. ...

CVE-2003-1491

CVE-2003-1491 affects Kerio Personal Firewall 2.1.4, where a default DNS (UDP 53) inbound rule permits packets from source port 53, enabling remote bypass of firewall filters. This is a network-accessible bypass vulnerability; exploitation details are provided in multiple sources (NVD/NIST, CVE l...

CVE-2003-1486

CVE-2003-1486 affects Phorum 3.4 to 3.4.2. An incorrect HTTP request to one of nine scripts (smileys.php, quick_listrss.php, purge.php, news.php, memberlist.php, forum_listrss.php, forum_list_rdf.php, forum_list.php, move.php) can make the server leak its full path in an error message. This is a ...