987 matches found
CVE-2006-0842
Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...
Directory traversal
Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. dot dot in the unique parameter...
CVE-2006-0611
CVE-2006-0611 targets @Mail 4.3 and earlier on Windows. The vulnerability is a directory traversal in compose.pl that lets remote attackers upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter. documents confirm affected software and the root cause (directory t...
CVE-2006-0611
Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. dot dot in the unique parameter...
CVE-2006-0279
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS13 and 2 APPS14 in the Oracle iLearning component...
CVE-2006-0279
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln 1 APPS13 and 2 APPS14 in the Oracle iLearning component...
CVE-2005-1025
The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library...
CVE-1999-1574
CVE-1999-1574 concerns a buffer overflow in the lex routines of nslookup on AIX 4.3, which can cause a core dump and potentially allow arbitrary code execution via long input strings. Affected component: nslookup (AIX 4.3). Exploitation details are not explicitly described in the provided documen...
CVE-1999-1583
CVE-1999-1583: Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument. Affected: nslookup on AIX 4.3. Root cause: buffer overflow when processing the hostname argument. Impact: local arbitrary code execution (per CVSSv2 vecto...
CVE-1999-1574
Buffer overflow in the lex routines of nslookup for AIX 4.3 may allow attackers to cause a core dump and possibly execute arbitrary code via "long input strings."...
CVE-1999-1583
Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument...
ModernGigabyte ModernBill 4.3 - Aid Cross-Site Scripting
ModernGigabyte ModernBill 4.3 - Aid Cross-Site Scripting source: https://www.securityfocus.com/bid/13089/info ModernBill is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'aid' parameter. This may...
ModernGigabyte ModernBill 4.3 - 'C_CODE' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13087/info ModernBill is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'ccode' parameter. This may facilitate the theft of cookie-based authentication...
ModernGigabyte ModernBill 4.3 - news.php File Inclusion
ModernGigabyte ModernBill 4.3 - news.php File Inclusion source: https://www.securityfocus.com/bid/13086/info ModernBill is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script through the...
AIX 4.3/5.1 - 5.3 lsmcode Local Root Command Execution
Exploit for aix platform in category local exploits ====================================================== AIX 4.3/5.1 - 5.3 lsmcode Local Root Command Execution ====================================================== mkdirhier /tmp/aap/bin export DIAGNOSTICS=/tmp/aap cat /tmp/aap/bin/Dctrl EOF...
CVE-2001-1098
The CVE-2001-1098 entry applies to Cisco PIX Firewall Manager (PFM) 4.3(2)g. The vulnerability arises because the enable password is stored/logged in plaintext in the pfm.log, potentially allowing local users to read and obtain the enable password. Affected behavior: local access to the password ...
PHP 4.3.x - Microsoft Windows Shell Escape functions Command Execution
source: https://www.securityfocus.com/bid/10471/info PHP is reportedly prone to a command execution vulnerability in its shell escape functions. This issue is due to a failure of PHP to properly sanitize function arguments. This issue might allow an attacker to execute arbitrary shell commands on...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...
CVE-2003-0863
The phpchecksafemodeincludedir function in fopenwrappers.c of PHP 4.3.x returns a success value 0 when the safemodeincludedir variable is not specified in configuration, which differs from the previous failure value and may allow remote attackers to exploit file include vulnerabilities in PHP...