CVE-2006-2146

HB-NS (Harold Bakker’s NewsScript) 1.1.6 contains multiple cross-site scripting (XSS) vulnerabilities in index.php. The CVE-2006-2146 entry states remote attackers can inject arbitrary script/HTML via the (1) poster_name, (2) poster_email, (3) poster_homepage, or (4) message parameters. The NVD e...

CVE-2002-2146

CVE-2002-2146 affects Savant Web Server prior to 3.2? (Savant Web Server 3.1 and earlier) through the CGI binary cgitest.exe . The issue is described as a buffer overflow in the CGI that can be triggered by a long HTTP request, leading to a denial of service via crash; some sources also indicate ...

CVE-2005-2146

The CVE concerns SSH Tectia Server (Windows) 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, which generate the host key with insecure permissions. This allows a local user to read the private host key and spoof the server, enabling impersonation. Evidence from multiple sources confi...

CVE-2002-2146

cgitest.exe in Savant Web Server 3.1 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request...