2843 matches found
CVE-2004-0928
The CVE-2004-0928 family affects Adobe JRun 4.x servers (and ColdFusion MX 6.0/6.1/J2EE) when running with IIS, where a crafted request ending in ";.cfm" can bypass authentication and disclose script/source content (e.g., .asp, .pl, .php). Connected advisories describe URL handling flaws that tri...
CVE-2005-0726
The CVE-2005-0726 entry concerns UBB.threads 6.0, where the editpost.php script is vulnerable to SQL injection via the Number parameter. The root cause is insufficient sanitization in editpost.php, allowing a remote attacker to execute arbitrary SQL commands. Impact includes potential data exposu...
UBBCentral UBB.Threads 6.0 - 'editpost.php' SQL Injection
source: https://www.securityfocus.com/bid/12784/info It is reported that UBB.threads is prone to an SQL injection vulnerability. The SQL injection vulnerability is reported to affect the 'editpost.php' script. UBB.threads 6.0 is reported prone to this issue. It is likely that other versions are...
CVE-2005-0500
CVE-2005-0500 affects Microsoft Internet Explorer 6 (IE6) bundled with Windows XP; the vulnerability is in how IE displays the title bar for script-initiated popup windows. Reported issues include spoofing the displayed domain name or title content in popups, potentially misleading users into bel...
CVE-2005-0303
CVE-2005-0303 applies to BackOffice Lite 6.0 and 6.01, where two files (comersus_supportError.asp and comersus_backofficelite_supportError.asp) are vulnerable to cross-site scripting via the error parameter. The underlying issue is reflected XSS allowing remote attackers to inject arbitrary scrip...
AWStats 6.0 < 6.2 - 'configdir' Remote Command Execution
/ AwStats exploit by Thunder, [email protected] This exploit makes use of the remote command execution bug discovered in AwStats ver 6.2 and below. The bug resides in the awstats.pl perl script. The script does not sanitise correctly the user input for the configdir parameter. If the users send...
CVE-2004-1043
CVE-2004-1043 describes a cross-domain vulnerability in the HTML Help ActiveX control (hhctrl.ocx) used by Internet Explorer. If one hhctrl.ocx instance opens a Related Topics window in one domain and another opens content in a different domain with the same window name, the content can run in th...
CVE-2004-0571
CVE-2004-0571 describes a remote code execution vulnerability in the Word for Windows 6.0 Converter used by WordPad. A crafted Word 6.0 document could trigger an unchecked data length/buffer handling in the converter, enabling an attacker to execute arbitrary code on a vulnerable system when the ...
Microsoft Word for Windows 6.0 Converter Font Conversion Buffer Overflow Vulnerability
Description Microsoft Word for Windows 6.0 Converter is reported prone to a buffer overflow vulnerability. An attacker may exploit this issue to gain unauthorized access to a vulnerable computer in the context of the user running the application. This issue specifically exists in the Font...
CVE-2004-1104
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor a element with an empty "href" attribute, and a FORM whose...
pntresmailer 6.0 - Directory Traversal
pntresmailer 6.0 - Directory Traversal source: https://www.securityfocus.com/bid/11767/info pnTresMailer is reported susceptible to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data. This vulnerability can be...
MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass
Exploit for unknown platform in category remote exploits ================================================================== MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass ================================================================== Orginal Advisory and exploit by...
CVE-2003-0929
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...
CVE-2004-0122
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files...
CVE-2002-1211
Prometheus 6.0 and earlier is vulnerable to remote PHP code execution via a tainted PROMETHEUS_LIBRARY_BASE that can be set to a remote server and loaded by index.php, install.php, or test_*.php. The underlying flaw is the conditional inclusion of files (autoload.lib, prometheus-lib.path) based o...
Microsoft Internet Explorer 6 - Resource Detection
source: https://www.securityfocus.com/bid/11026/info Microsoft Internet Explorer is prone to a security weakness that may permit an attacker to determine the existence of resources on a vulnerable computer. An attacker can use an IFRAME that is accessible within the same domain and change its URI...
CVE-2003-0929
Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy...
CVE-2003-0929
The provided data shows a concrete vulnerability: Clearswift MAILsweeper before version 4.3.15 fails to properly detect and filter ZIP 6.0 encoded files, allowing remote attackers to bypass policy. Affected product: MAILsweeper (SMTP) pre-4.3.15. Impact per sources: partial confidentiality, integ...
Microsoft Security Bulletin MS04-023
Microsoft Security Bulletin MS04-023 Vulnerability in HTML Help Could Allow Code Execution 840315 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Windows® Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Critical...
Microsoft Outlook Express 6.0 - URI Obfuscation
Microsoft Outlook Express 6.0 - URI Obfuscation source: https://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. ...