CVE-2006-2060

CVE-2006-2060 affects Invision Power Board (IPB) 2.0.x/2.1.x with the vulnerable PHP file action_admin/paysubscriptions.php . The issue is a directory-traversal via a leading ".." in the name parameter, when preceded by enough backspace characters (%08) to erase the initial static portion of a fi...

CVE-2002-2060

CVE-2002-2060 affects Links 2.0 pre4. The vulnerability is a buffer overflow in the PNG gamma table handling (large 16-bit PNG images), allowing remote network-triggered crashes and potential arbitrary code execution in affected client browsers. Connected sources confirm the same description acro...

CVE-2004-2060

ASPrunner 2.4 stores the database under the web root in the db/ directory, which may allow remote attackers to retrieve the database by directly requesting the database file. The vulnerability is tied to predictable database filenames based on table and field names. Affected product: ASPrunner (2...

CVE-2004-2060

ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names...

CVE-1999-0741

CVE-1999-0741 affects QMS CrownNet Unix Utilities for 2060. The vulnerability allows a non-authenticated attacker to gain root access (log on without a password) via the authentication mechanism, enabling complete control over the system. The CVSS data indicates a high-severity, network-exploitab...