10088 matches found
CVE-2003-1260
Technical summary: The CVE-2003-1260 issue is a buffer overflow in CuteFTP 5.0. A malicious server response (e.g., a long LIST response) can overflow a buffer and allow remote code execution. Documents from multiple sources corroborate that the exploit can be delivered over the network, potential...
CVE-2003-1258
The CVE-2003-1258 entry affects versatileBulletinBoard (vBB) versions 0.9.5 and 0.9.6. The vulnerability allows remote attackers to gain unauthorized administrative access by issuing a URL request with the uid parameter set to the webmaster uid, indicating an authentication/authorization bypass v...
CVE-2003-1252
The CVE-2003-1252 entry covers a vulnerability in register.php of S8Forum 3.0 where remote attackers can trigger arbitrary PHP execution by creating a user whose name ends in .php and placing commands in the E-mail field. This creates a web-accessible .php file that can be invoked to run commands...
CVE-2003-1236
CVE-2003-1236 involves multiple format-string vulnerabilities in the logger function of netzio.c for the Tanne 0.6.17 release, allowing remote attackers to execute arbitrary code via format specifiers in syslog. The entry is supported by multiple sources (NVD/CVE records, CVE List, Nessus/NSM fin...
CVE-2003-1243
Sage 1.0 b3 is affected by a Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary HTML or web script via the mod parameter. The issue is described without explicit exploit details or patched versions in the provided material; the CVSS indicates low-medium impa...
CVE-2003-1241
CVE-2003-1241 describes an XSS flaw in MyGuestbook 3.0 affecting (1) admin_index.php, (2) admin_pass.php, (3) admin_modif.php, and (4) admin_suppr.php. The vulnerability allows remote attackers to execute arbitrary PHP code by tweaking the location parameter to reference a URL on a remote server ...
CVE-2003-1277
CVE-2003-1277 describes cross-site scripting (XSS) in YaBB 1.5.0. The vulnerability allows remote attackers to execute arbitrary scripts as other users and potentially steal authentication information via cookies by injecting HTML/script into (1) news_icon of news_template.php and (2) threadid an...
CVE-2003-1255
addbookmark.php in Active PHP Bookmarks APB 1.1.01 allows remote attackers to add arbitrary bookmarks as other users using a modified authuserid parameter...
CVE-2003-1244
SQL injection vulnerability in pageheader.php in phpBB 2.0, 2.0.1 and 2.0.2 allows remote attackers to brute force user passwords and possibly gain unauthorized access to forums via the forumid parameter to index.php...
CVE-2003-1280
CVE-2003-1280: A directory traversal flaw in cgihtml 1.69 enables remote attackers to overwrite or create arbitrary files via .. in multipart/form-data uploads. Connected Red Hat/CVE records reiterate the same vulnerability details. The available documents do not provide a remediation or patch ve...
CVE-2003-1246
NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver IPD 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command...
CVE-2003-1257
The CVE-2003-1257 issue concerns the script find_theni_home.php in E-theni that allows remote attackers to obtain sensitive system information by requesting a URL that executes phpinfo. The connected Red Hat advisory and CVE records corroborate that a remote information disclosure is possible via...
CVE-2003-1273
Winamp 3.0 is affected: processing a .b4s playlist file with a name containing non-English characters (e.g., Cyrillic) can crash the application, causing a denial of service. The provided documents do not specify a patch or exact remediation; no exploitation details are given. In short, vulnerabl...
CVE-2003-1240
CVE-2003-1240 affects CuteNews 0.88. The vulnerability is a PHP remote file inclusion due to unsanitized input in the cutepath parameter used by shownews.php, search.php, and comments.php, enabling remote attackers to execute arbitrary PHP code on the server. The root cause is failure to sanitize...
CVE-2003-1248
CVE-2003-1248 affects H-Sphere WebShell 2.3. The vulnerability allows remote command execution by passing shell metacharacters in the mode and zipfile URL parameters. Impact is partial confidentiality, integrity, and availability. No explicit exploitation status is provided in the documents; expl...
CVE-2003-1238
CVE-2003-1238 is a cross-site scripting (XSS) vulnerability in Nuked-Klan 1.3 beta and earlier. The flaw allows remote attackers to steal authentication cookies by injecting arbitrary HTML or script into the op parameter of the Team, News, and Liens modules. Affected component is the web applicat...
CVE-2003-1242
Sage 1.0 b3 is affected by a vulnerability where remote attackers can cause the server to disclose the root web server path by requesting a non-existent module, returning the path in an error message. The Red Hat CVE entry and related records corroborate the same description. The precise affected...
CVE-2003-1244
CVE-2003-1244 affects phpBB 2.0, 2.0.1 and 2.0.2 via a SQL injection in page_header.php triggered by the forum_id parameter to index.php. The underlying issue is improper handling of the forum_id value, enabling an attacker to brute-force user passwords and potentially gain unauthorized access to...
CVE-2003-1256
The CVE-2003-1256 entry concerns E-theni’s aff_liste_langue.php, where the rep_include parameter can be manipulated to reference a URL on a remote server, enabling remote PHP code execution via a Remote File Inclusion flaw. The connected sources (RH Red Hat advisory, CVE listings, and Nessus plug...