Microsoft Internet Explorer 6 - Resource Detection

source: https://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within the same domain and change its URI...

AWStats 5.0 6.3 - logfile File Inclusion Command Execution

AWStats 5.0 6.3 - logfile File Inclusion Command Execution Example: http://target/awstats.pl?filterrawlog=&rawlogmaxlines=5000&config=stats.jdims.info&framename=main&pluginmode=rawlog&log file=/etc/passwd...

CVE-2004-0624

The CVE-2004-0624 entry concerns a PHP remote file inclusion vulnerability in Artmedic Links 5.0 (artmedic_links5). The issue arises in index.php where the id parameter is used to reference a URL on a remote web server, allowing an attacker to execute arbitrary PHP code from a remote location. Co...

CVE-2004-0624

PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 artmediclinks5 allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code...

CVE-2004-0624: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 artmediclinks5 allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code...

McMurtrey/Whitaker & Associates Cart32 2-5 GetLatestBuilds Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10617/info Cart32 is reported prone to a cross-site scripting vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. A remote attacker can exploit this issue by creating a malicious link to the vulnerable...

MS Windows IIS 5.0 SSL Remote buffer overflow Exploit (MS04-011)

Exploit for unknown platform in category remote exploits ================================================================ MS Windows IIS 5.0 SSL Remote buffer overflow Exploit MS04-011 ================================================================ // / THCIISSLame 0.3 - IIS 5 SSL remote root...

Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)

// / THCIISSLame 0.3 - IIS 5 SSL remote root exploit / / Exploit by: Johnny Cyberpunk [email protected] / / THC PUBLIC SOURCE MATERIALS / / / / Bug was found by Internet Security Systems / / Reversing credits of the bug go to Halvar Flake / / / / compile with MS Visual C++ : cl THCIISSLame.c / /...

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service

Panda ActiveScan 5.0 - ascontrol.dll Denial of Service source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the...

Panda ActiveScan 5.0 - 'ascontrol.dll' Denial of Service

source: https://www.securityfocus.com/bid/10067/info It has been reported that Panda ActiveScan may be prone to a denial of service vulnerability that may cause an instance of Internet Explorer to crash. The issue may present it self when the 'SetSitesFile' is called in combination with setting t...

Foxmail 5.0 PunyLib.dll Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ===================================================== Foxmail 5.0 PunyLib.dll Remote Stack Overflow Exploit ===================================================== / fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow explo...

Foxmail 5.0 - 'PunyLib.dll' Remote Stack Overflow

/ fmx.c - x86/win32 Foxmail 5.0 PunyLib.dll remote stack buffer overflow exploit C COPYRIGHT XFOCUS Security Team, 2004 All Rights Reserved ----------------------------------------------------------------------- Author : xfocus : http://www.xfocus.org Maintain : XFOCUS Security Team Version : 0.2...

CVE-2004-0260: Undefined Security Weakness

The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||...

Immunity Canvas: NAIMAS32

Name| naimas32 ---|--- CVE| CVE-2004-0095 Exploit Pack| CANVAS Description| Naimas32 Notes| CVE Name: CVE-2004-0095 VENDOR: McAfee CVE Url: https://vulners.com/cve/CVE-2004-0095 CVSS: 5.0...

CVE-2003-1260

Buffer overflow in CuteFTP 5.0 allows remote attackers to execute arbitrary code via a long response to a LIST command...

CVE-2003-1425

guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter...

CVE-2003-1426

Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...

KLA10130 ACE vulnerability in CuteFTP

A buffer overflow was found in CuteFTP. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited from the network via a specially designed server response. Original advisories - Exploitation Public exploits exist for this vulnerability. CVE...

Divine Content Server 5.0 - Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/8763/info It has been reported that Divine Content Server is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the 'pagename' attribute in the error page of the software. This issu...

CVE-2003-0801

CVE-2003-0801 – Nokia Electronic Documentation (NED) 5.0 suffers a cross-site scripting (XSS) vulnerability. A remote attacker can cause the application to execute arbitrary web script and steal cookies via a crafted URL to the docs/ directory containing the script. Public references indicate an ...