74 matches found
CVE-2010-2355
creationtimestamp| type| source ---|---|--- 2010-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13785...
NullLogic Groupware多个远程安全漏洞
CVECAN ID: CVE-2009-2354,CVE-2009-2355,CVE-2009-2356 Groupware是一个开源的团队协作软件，包含有即时消息、公共论坛、邮件等多种功能。 远程攻击者可以通过向Groupware的多个模块提交恶意参数请求导致拒绝服务或执行任意代码。 1 Groupware在与数据库服务器通讯时通常会调用sqlqueryf函数，该函数会使用C格式字符串和其他参数来创建SQL查询。例如，在试图登录的时候，authcheckpass函数会生成以下查询： if sqr=sqlqueryfsid, "SELECT userid, password FROM...
CVE-2009-2355
NullLogic Groupware 1.2.7 is affected by CVE-2009-2355 in the forum module: remotely authenticated users can crash the application by passing an empty string or a non-numeric string when selecting a forum (fmessagelist). The underlying issue is input handling in the forum selection path, as docum...
CVE-2008-2355
CVE-2008-2355 describes a directory traversal vulnerability in WR-Meeting 1.0. When magic_quotes_gpc is disabled, an attacker can cause the application to include and execute local files by inserting a .. (dot dot) in the msnum parameter of a coment event, exposing partial confidentiality and int...
CVE-2008-2355
creationtimestamp| type| source ---|---|--- 2008-05-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5637...
CVE-2002-2355
CVE-2002-2355 affects Netgear FM114P firmware 1.3 wireless firewall. When configured to back up configuration information, it stores DDNS username and password, MAC address filtering table, and possibly other data in cleartext, enabling local users to obtain sensitive information. The available c...
CVE-2007-2355
CVE-2007-2355 affects the OPeNDAP 3 CGI_server, where the get_url function in DODS_Dispatch.pm is vulnerable to remote command execution via shell metacharacters in a URL. This is a remote, unauthenticated vulnerability with high impact (complete confidentiality, integrity, and availability). Mit...
CVE-2006-2355
The CVE-2006-2355 entry concerns Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium. Public sources state a path-information disclosure via 404 error messages, enabling remote attackers to obtain full path details. OpenVAS/Nessus entries corroborate that Ipswitch WhatsUp Pro...
Mandrake Linux Security Advisory : fetchmail (MDKSA-2005:209)
Thomas Wolff and Miloslav Trmac discovered a race condition in the fetchmailconf program. fetchmailconf would create the initial output configuration file with insecure permissions and only after writing would it change permissions to be more restrictive. During that time, passwords and other dat...
CVE-2004-2355
Crafty Syntax Live Help (CSLH) prior to 2.7.4 is affected by a Cross-site scripting (XSS) vulnerability. The issue, described in CVE-2004-2355, allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Supported by NVD entry, the description ...
Fedora Core 4 : fetchmail-6.2.5-7.fc4.1 (2005-613)
A buffer overflow was discovered in fetchmail's POP3 client. A malicious server could cause fetchmail to execute arbitrary code. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2355 to this issue. All fetchmail users should upgrade to the updated package, which fix...
Fedora Core 3 : fetchmail-6.2.5-7.fc3.1 (2005-614)
A buffer overflow was discovered in fetchmail's POP3 client. A malicious server could cause fetchmail to execute arbitrary code. The Common Vulnerabilities and Exposures project has assigned the name CVE-2005-2355 to this issue. All fetchmail users should upgrade to the updated package, which fix...
CVE-2004-2355
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...