CVE-2004-1981

The web interface for Crystal Reports allows remote attackers to cause a denial of service disk exhaustion by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder...

Lotus Domino DOT Bug Allows for Source Code Viewing

Through some testing against some Lotus Domino web servers verified in version 5 & 6, if you append a period to the end of a non-default Lotus file type non .NSF, .NTF, etc via your browser URL request, you will be prompted to download the file. This has a possible repercussion of the ability to...

CVE-2001-1464

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords...

Seagate Crystal Reports exposes cleartext username/password pairs when embedded in URL or HTTP request

Overview The Seagate Crystal Reports product exposes passwords to back-end databases in certain configurations. In particular, the username and password are transmitted in plaintext from the client browser to the server as part of the URL when using technologies other than Active Server Pages ASP...