CVE-2003-1184

The CVE describes multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81. The flaws allow remote attackers to inject arbitrary web script or HTML via inputs such as (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other “Diverse XSS Bugs.” The...

CVE-2003-1166

CVE-2003-1166 describes a directory traversal vulnerability in HTTP Commander 4.0. The flaw affects the Openfile.aspx and Html.aspx components, where a .. (dot dot) in the file parameter can be used to view arbitrary files (remote access). Root cause: insufficient validation of the file parameter...

CVE-2003-1156

CVE-2003-1156 concerns Java Runtime Environment (JRE) and SDK 1.4.2 through 1.4.2_02. A local attacker can cause arbitrary file overwrite via a symbolic link race on (1) unpack.log (created by the unpack program) or (2) .mailcap1 and .mime.types1 (created by the RPM package). The vulnerability is...

CVE-2003-1139

Musicqueue 1.2.0 is affected. The vulnerability allows a local user to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file, enabling potentially unauthorized modification of files. Root cause: a crash-generated file name (...

CVE-2003-1196

CVE-2003-1196 is described as a SQL injection flaw in VieBoard 2.6, specifically in viewtopic.asp via the forumid parameter, enabling remote execution of arbitrary SQL commands. The connected records confirm VieBoard 2.6 as affected; however, no remediation or fix details are provided in the supp...

CVE-2003-1194

The vulnerability CVE-2003-1194 affects Booby up to version 0.2.3 (inclusive) and is a cross-site scripting flaw that allows an attacker to inject arbitrary web script or HTML via the error message. Affected software is Booby .1 through 0.2.3; the root cause is an XSS in error-output handling, en...

CVE-2003-1165

CVE-2003-1165 concerns BRS WebWeaver 1.06 and earlier. The vulnerability is a buffer overflow in processing an HTTP request with a long User-Agent header, allowing remote attackers over the network to trigger a crash (DoS) and potentially execute arbitrary code. The NVD entry lists a base score o...

CVE-2003-1167

KPopup 0.9.1 exposes two local-privilege/vulnerability issues. First, a format-string vulnerability in main.cpp (kpopup 0.9.1–0.9.5pre2) can allow local users to cause a denial of service (segmentation fault) and potentially execute arbitrary code via crafted format specifiers in command line arg...

CVE-2003-1138

The CVE-2003-1138 issue affects Apache 2.0.40 as shipped with Red Hat Linux 9.0. The vulnerability arises from handling a GET request containing a double slash (//), which allows remote attackers to list directory contents despite auto indexing being disabled or a default page configured. The sec...

CVE-2003-1197

Cross-site scripting XSS vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the 1 topmessage parameter or 2 topic field of a new thread...

CVE-2003-1147

CVE-2003-1147 is rejected and not used; duplicate of CVE-2003-0955.

CVE-2003-1154

MAILsweeper for SMTP 4.3 allows remote attackers to bypass virus protection via a mail message with a malformed zip attachment, as exploited by certain MIMAIL virus variants...

CVE-2003-1178

Eval injection vulnerability in comments.php in Advanced Poll 2.0.2 allows remote attackers to execute arbitrary PHP code via the 1 id, 2 templateset, or 3 action parameter...

CVE-2003-1147

...

CVE-2003-1172

The CVE-2003-1172 entry concerns a directory traversal vulnerability in the view-source sample file of Apache Cocoon 2.1 and 2.2. The flaw allows remote attackers to access arbitrary files by supplying a .. (dot dot) sequence in the filename parameter. This is a server-side path traversal issue w...

CVE-2003-1136

CVE-2003-1136 describes a cross-site scripting (XSS) vulnerability in Chi Kien Uong Guestbook 1.51. An attacker can inject arbitrary web script or HTML via (1) HTML in a posted message or (2) Javascript in an onmouseover attribute in an e-mail address or URL. The entry provides a CVSS v2 base sco...

CVE-2003-1141

CVE-2003-1141 describes a stack buffer overflow in the NIPrint LPD service (NIPrint 4.x) that can be triggered remotely by sending a long string to TCP port 515, enabling arbitrary code execution on the affected host. Public material in connected docs confirms the vulnerability type as a remote o...

CVE-2003-1178

CVE-2003-1178 affects Advanced Poll 2.0.2. It exposes a vulnerability in comments.php where the (1) id, (2) template_set, or (3) action parameter can cause evaluated PHP code to run, allowing remote code execution. Impact is consistent with arbitrary PHP execution (no authentication required as p...

CVE-2003-1188

Technical details about CVE-2003-1188 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation.

CVE-2003-1134

CVE-2003-1134 affects Sun Java 1.3.1, 1.4.1, and 1.4.2. The issue is a local denial-of-service (JVM crash) potentially triggered by calling the ClassDepth function with a null parameter, which leads to a crash rather than a null pointer exception. The available connected sources confirm the same ...