4062 matches found
CVE-2000-1218
The CVE relates to Microsoft Windows 98, NT 4.0, 2000, and XP where the default domain name resolver configuration sets QueryIpMatching to 0. This causes the resolver to accept DNS updates from hosts it did not query, enabling DNS cache poisoning by a remote attacker. The PTSecurity entry confirm...
CVE-1999-1576
Buffer overflow in Adobe Acrobat ActiveX control pdf.ocx, PDF.PdfCtrl.1 1.3.188 for Acrobat Reader 4.0 allows remote attackers to execute arbitrary code via the pdf.setview method...
CVE-2004-0928
The CVE-2004-0928 family affects Adobe JRun 4.x servers (and ColdFusion MX 6.0/6.1/J2EE) when running with IIS, where a crafted request ending in ";.cfm" can bypass authentication and disclose script/source content (e.g., .asp, .pl, .php). Connected advisories describe URL handling flaws that tri...
CVE-1999-1581
The CVE-1999-1581 issue affects the SNMP agent (snmp.exe) on Windows NT 4.0 prior to Service Pack 4. The vulnerability is a memory leak triggered by a high volume of SNMP packets containing undecodable OIDs, leading to denial of service via memory exhaustion. The provided sources describe the aff...
CVE-1999-1579
CVE-1999-1579 affects the Cenroll ActiveX control (xenroll.dll) used in Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 prior to SP6. The vulnerability enables remote attackers to cause a denial of service via resource consumption by creating a large number of arbitrary files...
APT-webshop 3.0/4.0 - 'modules.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/17425/info APT-webshop is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
gtscrash.c.txt
/ GoodTech Telnet Server Buffer Overflow Crash POC created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on GoodTech Telnet Server versions 4.0 - 5.0 versions prior to 5.0.7 on a Windows XP Professional sp2 operating system. This exploit connects to the...
2 vulnerabilities in BetaParticle
BetaParticle bp is a ASP CMS Blog + Gallery . I found 2 vulnerabilities in BetaParticle. http://example.com/bp : is BP path ! 1 BP Database Disclosure For version 3.0 Database path : http://example.com/bp/database/dbBlogMX.mdb you can download it and disclose the administrator username and passwo...
CVE-2005-0768
Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...
CVE-2003-1102
Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
No description provided by source. / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50...
CVE-2005-0641
CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...
CVE-2004-1724
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusionadmin/dbbackups directory to world read/write/execute 777, which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator userna...
CVE-2004-1750
RealVNC 4.0 and earlier is affected; remote attackers can cause a denial of service by establishing a large number of connections to port 5900. The available documents do not provide exploit details or remediation. No further specifics on affected versions beyond 4.0 and earlier, or mitigation in...
CVE-2004-1724
CVE-2004-1724 affects PHP-Fusion 4.0 where the ReadMe First.txt instructs setting fusion_admin/db_backups to 777. This world-writable directory enables remote attackers to download or view backups, which have easily guessable filenames and contain administrator usernames and passwords. Root cause...
CVE-2004-1594
Cross-site scripting XSS vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag...
CVE-2004-1594
CVE-2004-1594 is an XSS vulnerability in FuseTalk 4.0 where an attacker can trigger arbitrary script execution via an image tag (img src). Public references (NVD/NIST, CVSS 2.0 base score 4.3) corroborate a web context with no authentication required and partial integrity impact. A Nessus NASL en...
CVE-2004-1511
CVE-2004-1511 concerns Hotfoon 4.0, where the application does not notify users before opening links in web browsers. The described vulnerability enables a remote attacker to execute arbitrary code through a specially crafted link sent in a chat window. The available documentation states the affe...