CVE-2003-1149

The vulnerability CVE-2003-1149 affects Symantec Norton Internet Security 2003, specifically version 6.0.4.34. It is a cross-site scripting (XSS) flaw where a remote attacker can inject arbitrary script or HTML by supplying a crafted URL to a blocked-site page, which is then displayed on the bloc...

CVE-2003-1199

The CVE-2003-1199 entry documents a cross-site scripting (XSS) vulnerability in MyProxy 20030629 that allows remote attackers to inject arbitrary web script or HTML via the URL. The connected sources (NVD, CVE list) confirm the affected software and vulnerability type, but do not provide specific...

CVE-2003-1183

The CVE concerns the WebCache component in Oracle Files within Oracle Collaboration Suite Release 1. versions 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 cache files despite Oracle Files cacheability rules, allowing local users to gain access. Affected product/area: WebCache in Oracle Files. Underlying i...

CVE-2003-1186

TelCondex Simple Webserver vulnerable to a remote buffer overflow in HTTP Referer header handling (CVE-2003-1186). Affected: TelCondex SimpleWebserver 2.12.30210 Build3285. Impact: remote code execution or crash (as described in OpenVAS/Nessus entries). Remediation: upgrade to version 2.13 or lat...

CVE-2003-1185

ThWboard prior to Beta 2.8.2 contains multiple SQL injection vulnerabilities exploitable remotely via several vectors: Admin-Center, Announcements, admin/calendar.php, and showevent.php. The CVSSv2 base score is 7.5 (HIGH) with network access, no authentication, and partial impacts to confidentia...

CVE-2003-1147

CVE-2003-1147 is rejected and not used; duplicate of CVE-2003-0955.

CVE-2003-1164

The vulnerability CVE-2003-1164 is an XSS flaw in Mldonkey 2.5-4, where an attacker can craft a URI that is reflected into the HTML error page. The affected software is Mldonkey (version 2.5-4). Underlying cause, impact, and concrete exploit details beyond the description are not provided in the ...

CVE-2003-1181

Advanced Poll 2.0.2 (PHP-based poll system) is affected. The vulnerability stems from info.php calling phpinfo(), allowing remote attackers to disclose sensitive information about the host PHP configuration. Exploitation is remote information disclosure; no patch/version remediation details are p...

CVE-2003-1200

CVE-2003-1200 is a stack-based buffer overflow in Alt-N MDaemon’s WorldClient form2raw.cgi (FORM2RAW.exe). A long From parameter to Form2Raw.cgi can cause remote code execution. Affected products include MDaemon versions 6.5.2–6.8.5 with WorldClient HTTP server enabled; upgrade to 6.8.6 or remove...

CVE-2003-1143

CVE-2003-1143 affects Croteam Serious Sam demo test 2 (version 2.1a) and Serious Sam: The First Encounter/Second Encounter (version 1.05). The vulnerability allows remote attackers to trigger a denial-of-service (crash or freeze) by sending a TCP packet with an invalid first parameter. The availa...

CVE-2003-1137

CVE-2003-1137 affects sh-httpd versions 0.3 and 0.4. The issue allows remote attackers to read files or execute arbitrary CGI scripts via a GET request containing an asterisk (*) wildcard character, indicating improper handling of wildcards in input. The provided documents do not specify a fix or...

CVE-2003-1163

CVE-2003-1163 affects Ganglia gmond 2.5.3. The vulnerability arises in hash.c where a UDP packet containing a single-byte name string is used as an out-of-bounds array index, causing a remote denial of service (segmentation fault). Exploitation details are not provided beyond the description, and...

CVE-2003-1150

The CVE-2003-1150 entry describes a buffer overflow in the PMAP.NLM portmapper of Novell NetWare 6 SP3 and ZenWorks for Desktops 3.2 SP2 through 4.0.1 that could allow a remote attacker to cause a denial of service and potentially execute arbitrary code via unknown attack vectors. No specific exp...

CVE-2003-1197

The CVE-2003-1197 entry documents a cross-site scripting (XSS) vulnerability in LedForums Beta 1 running on Ledscripts.com, exploitable via index.php in the parameters top_message or the topic field when creating a new thread. Affected software is LedForums Beta 1; the underlying issue is imprope...

CVE-2003-1162

Tritanium Bulletin Board 1.2.3 is affected by CVE-2003-1162. The vulnerability arises from index.php allowing remote attackers to read and reply to arbitrary messages by manipulating thread_id, forum_id, and sid parameters. The available sources describe the affected component and negligence in p...

CVE-2003-1159

Technical details about CVE-2003-1159 are not publicly provided in the attached documents. Monitor for updates.

CVE-2003-1202

Technical details such as affected products, versions, root cause, or exploit specifics are not publicly provided in the supplied documents. Monitor for updates.

CVE-2003-1158

CVE-2003-1158 reports multiple buffer overflows in the FTP service of Plug and Play Web Server 1.0002c, allowing remote users to crash the server via long FTP commands (dir, ls, delete, mkdir, DELE, RMD, MKD). The provided documents do not specify exact vulnerable components, versions beyond the ...

CVE-2003-1157

CVE-2003-1157 describes a cross-site scripting (XSS) vulnerability in the Citrix MetaFrame XP Server 1.0 Web Interface component, affecting the login.asp handling of the NFuse_Message parameter. Attackers can inject arbitrary web script or HTML via this parameter, potentially impacting users' bro...

CVE-2003-1191

Technical details for CVE-2003-1191 are not provided in the connected documents. Public information in the initial description confirms a DoS via HTML in the Name field for e107, but no concrete details beyond that are available here. Monitor for updates.