DotNetNuke 4.4.1 <= 4.8.4 Identity Authentication Bypass Vulnerability

DotNetNuke is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

hMailServer IMAP Denial of Service Vulnerability

hMailServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

hMailServer IMAP命令拒绝服务漏洞

BUGTRAQ ID: 30663 CNCAN ID：CNCAN-2008081411 hMailServer是一款EMAIL服务程序。 hMailServer IMAP服务程序不正确处理IMAP命令，远程攻击者可以利用漏洞对服务器进行拒绝服务攻击。 发送大量IMAP命令： A01 CREATE AAAAA A02 CREATE AAAAAA A03 CREATE AAAAAAA ... A97 RENAME AAAAA BBBBB A98 RENAME AAAAAA BBBBBB A100 RENAME AAAAAAA BBBBBBB 可导致服务器消耗大量资源而造成拒绝服务攻击。...

Easynews 4.4.1 - 'admin.php' Authentication Bypass

+------------------------------------------------------------------------------------------- + Easynews +------------------------------------------------------------------------------------------- + Details: + Easynews doesn't properly check to ensure an administrator has been logged in with...

Easynews <= 4.4.1 (admin.php) Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================= Easynews = 4.4.1 admin.php Authentication Bypass Vulnerability =================================================================...

Easynews &lt;= 4.4.1 (admin.php) Authentication Bypass Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Easynews = 4.4.1 admin.php Authentication Bypass Vulnerability +------------------------------------------------------------------------------------------- + Affected...

Easynews 4.4.1 - admin.php Authentication Bypass

Easynews 4.4.1 - admin.php Authentication Bypass +------------------------------------------------------------------------------------------- + Easynews +------------------------------------------------------------------------------------------- + Details: + Easynews doesn't properly check to...

Joomla! < 1.0.11 Unspecified Remote Code Execution

The version of Joomla! installed on the remote host is affected by a remote code execution vulnerability in the includes/PEAR/PEAR.php script. An unauthenticated, remote attacker can exploit this to execute arbitrary code, subject to the privileges of the web server user ID. Note that successful...

e107-GLOBALS-php.txt

!/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "This site is...

CVE-2006-2924

CVE-2006-2924 affects Ingate Firewall (SIP module) and SIParator pre-4.4.1. When TLS/SSL is enabled, remote attackers can cause a crash via a crafted SSL/TLS handshake, leading to denial of service. The connected documents indicate the issue is tied to TLS/SSL handshakes but do not provide explic...

security flaw

Multiple cross-site scripting XSS vulnerabilities in PHP 4.4.1 and 5.1.1, when displayerrors and htmlerrors are on, allow remote attackers to inject arbitrary web script or HTML via inputs to PHP applications that are not filtered when they are included in the resulting error message...

WebWasher < 4.4.1 Build 1613 Multiple XSS Vulnerabilities

WebWasher is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-0208

The CVE-2006-0208 entry affects PHP 4.4.1 and 5.1.1, where enabling display_errors and html_errors allows remote attackers to inject arbitrary script/HTML via unsafely echoed inputs in error messages. Public-advisory details (from connected docs) indicate this class of XSS vulnerabilities is tied...

Fedora Core 4 : rpm-4.4.1-22 (2005-565)

This update corrects security problem CVE-2005-2096. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

WebWasher CSM 4.4.1 Build 752 Conf Script - Cross-Site Scripting

WebWasher CSM 4.4.1 Build 752 Conf Script - Cross-Site Scripting source: https://www.securityfocus.com/bid/13037/info It is reported that the WebWasher 'conf' script is prone to a cross-site scripting vulnerability. A remote attacker may exploit this issue to have arbitrary script and HTML code...