90 matches found
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...
CVE-2009-4041
CVE-2009-4041 affects UseBB 1.0.9 before 1.0.10. A crafted BBCode tag causes the BBCode parser to loop infinitely, enabling a remote attacker to trigger a denial of service. The available connected documents confirm the DoS condition but do not provide a patched version or definitive remediation ...
CVE-2008-4041
CVE-2008-4041 affects the Softalk Mail Server (formerly WorkgroupMail) IMAP server, version 8.5.1.431. The issue enables remote authenticated users to cause a denial of service by issuing a long IMAP APPEND command with certain repeated parameters, leading to resource consumption and daemon crash...
CVE-2008-4041
creationtimestamp| type| source ---|---|--- 2008-09-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32310...
Design/Logic Flaw
Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow remote attackers to execute arbitrary commands via certain vectors associated with launching "a file handling program based on the file extension at the end of the URI," a variant ...
CVE-2007-4041
CVE-2007-4041 describes multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and Firefox 3.0alpha that allow remote attackers to execute arbitrary commands via a NULL byte (%00) and shell metacharacters in certain URI handlers (mailto, nntp, news, snews, telnet). The issue is a ...
CVE-2006-4041
SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors...
CVE-2006-4041
CVE-2006-4041: Pike before 7.6.86 with PostgreSQL is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands via unspecified attack vectors. Affected products (Pike) and advisories (Ubuntu USN-367-1, Gentoo GLSA 200608-10, SUSE CVE page) indicate the risk; remedia...
CVE-2005-4041
CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...
