Authentication flaw

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

CVE-2006-1774

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

Memory corruption

Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name IDN using double-byte character sets DBCS, aka the "Double Byte Character Parsing Memory Corruption Vulnerability."...

CVE-2006-1189

Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name IDN using double-byte character sets DBCS, aka the "Double Byte Character Parsing Memory Corruption Vulnerability."...

Bugzero XSS vuln.

Bugzero XSS vuln. Vuln. discovered by : r0t unsecured-systems Date: 1 april 2006 vendor:http://www.websina.com/bugzero/ affected versions:V.4.3.1 and also development version. Bugzero contains a flaws that allows a remote cross site scripting attacks. Those flaws exists because input passed to...

Privilege escalation

NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" forward slash after the file extension...

CVE-2006-0815

NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" forward slash after the file extension...

CVE-2006-0815

NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" forward slash after the file extension...

Code injection

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

CVE-2006-0862

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

CVE-2006-0862

CVE-2006-0862 affects InfoVista PortalSE 2.0 Build 20087 on Solaris 8; an unspecified vulnerability allows remote attackers to read arbitrary files via a crafted URL. The issue is reported to occur without the IV00038969 hotfix. No public details on underlying root cause are provided beyond the v...

CVE-2006-0862

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL...

MiniNukeCMS.txt

--Security Report-- Advisory: MiniNuke CMS System all versions pages.asp SQL Injection vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/02/06 10:31 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke...

Design/Logic Flaw

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

GLSA-200512-10 : Opera: Command-line URL shell command injection

The remote host is affected by the vulnerability described in GLSA-200512-10 Opera: Command-line URL shell command injection Peter Zelezny discovered that the shell script used to launch Opera parses shell commands that are enclosed within backticks in the URL provided via the command line. Impac...

Authentication bypassing in Lotus Domino

By creating a specially crafted url, the authentication mechanism of Domino database can be circumvented. SPDX-FileCopyrightText: 2002 Davy Van De Moere Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

ICECast < 1.3.11 Crafted URL DoS Vulnerability

ICECast is prone to a remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2005-3388

Cross-site scripting XSS vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."...

CVE-2005-3388

Cross-site scripting XSS vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."...