341 matches found
CVE-2007-1895
PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, allows remote attackers to execute arbitrary PHP code via an ftp URL in a mymsroot cookie, a different vector than CVE-2007-0491 and CVE-2006-4630...
CVE-2006-0245
Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the 3 redir, 4 productId, 5 docId, 6 act, and 7 catId parameters in index.php; and the 8 username field in a login action in index.php. NOTE: the cart.php/redi...
CVE-2005-3759
CVE-2005-3759: Horde webmail suite prior to 3.0.7 contains cross-site scripting vulnerabilities in the MIME viewers (gzip/tar and css) that do not filter/escape HTML when displaying attachments. Affected products include Horde up to 3.0.7; Debian/SUSE advisories reference Horde3 with fixes in 3.0...
CVE-2000-1233
SQL injection vulnerability in read.php3 and other scripts in Phorum 3.0.7 allows remote attackers to execute arbitrary SQL queries via the sSQL parameter...
CVE-2000-1232
The CVE-2000-1232 entry concerns Phorum 3.0.7, where upgrade.php3 could allow remote attackers to modify certain Phorum database tables via an unknown method. The connected documents confirm the affected product/version and the basic impact (unauthorized modification of database tables), but they...
CVE-2000-1233
Phorum 3.0.7 contains a SQL injection vulnerability in read.php3 and other scripts that allows remote attackers to inject arbitrary SQL via the sSQL parameter. Affected component: Phorum 3.0.7 scripts; root cause: unsafely interpolated sSQL input leading to SQL query manipulation. Impact is descr...
CVE-2000-1230
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHPAUTHUSER parameter set to "boogieman"...
CVE-2000-1234
violation.php3 in Phorum 3.0.7 allows remote attackers to send e-mails to arbitrary addresses and possibly use Phorum as a "spam proxy" by setting the Mod and ForumName parameters...
CVE-2000-1236
Oracle IAS 3.0.7 and earlier are affected by a SQL injection in the mod_sql component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the URL’s query string. The connected Nessus entry confirms this CVE-2000-1236 detail as part of Oracle Application Server multi-v...
CVE-2000-1230
The CVE-2000-1230 entry concerns Phorum 3.0.7, where a backdoor in auth.php3 allows remote attackers to access restricted web pages by sending an HTTP request with the PHP_AUTH_USER parameter set to boogieman. This describes a vulnerable component (auth.php3) and a clear attack vector (HTTP-based...
CVE-2000-1234
CVE-2000-1234: In Phorum 3.0.7, violation.php3 can be abused by remote attackers to send email to arbitrary addresses and possibly turn Phorum into a spam proxy by manipulating Mod and ForumName parameters. Affected: Phorum 3.0.7. Root cause: parameter handling in violation.php3 that enables emai...
CVE-2000-1228
CVE-2000-1228 affects Phorum 3.0.7. An unauthenticated remote attacker can change the administrator password by sending an HTTP request to admin.php3 that sets the variables step, option, confirm and newPssword. The description across sources corroborates that user authentication is bypassed to a...
vBulletin < 3.0.7 misc.php PHP Code Injection
Binary data 2642.prm...
CVE-2004-0930
The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...
security flaw
The msfnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service CPU consumption via a SAMBA request that contains multiple wildcard characters...
CVE-2000-1231
code.php3 in Phorum 3.0.7 allows remote attackers to read arbitrary files in the phorum directory via the query string...
CVE-2000-1228
Phorum 3.0.7 allows remote attackers to change the administrator password without authentication via an HTTP request for admin.php3 that sets step, option, confirm and newPssword variables...
CVE-2000-1230
Backdoor in auth.php3 in Phorum 3.0.7 allows remote attackers to access restricted web pages via an HTTP request with the PHPAUTHUSER parameter set to "boogieman"...