CVE-2006-1520: Undefined Security Weakness

Format string vulnerability in ANSI C Sender Policy Framework library libspf before 1.0.0-p5, when debugging is enabled, allows remote attackers to execute arbitrary code via format string specifiers, possibly in an e-mail address...

CVE-2006-1894: Undefined Security Weakness

Cross-site scripting XSS vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the 1 ICQ, 2 AIM, 3 MSN, 4 Google Talk, 5 Website Name, 6 Website Address, 7 Email Address, 8 Location, 9 Signature, and 10 Sub-Titles fields in the user profil...

Xss Vbulletin 3.5.x ( test: 3.5.4 )

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Xss Vbulletin 3.5.x test: 3.5.4 = Author: SpiderZ = Sito: www.spiderz.tk 1 -------------------------------------------------------------------- Name file: exploit.php...

CVE-2005-4688

CVE-2005-4688 affects PunBB 1.2.9, where changing the account e-mail address does not require password verification, enabling an attacker with a hijacked login session to alter the e-mail associated with the account. Impact is user account compromise via e-mail reassignment; no additional exploit...

CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

CVE-2005-4136

Cross-site scripting XSS vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter...

osTicket <= 1.2.7 Support Address DoS Vulnerability

The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced...

CVE-2005-2662

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...

CVE-2002-1842: Undefined Security Weakness

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2036

The CVE-2005-2036 entry describes a vulnerability in Cool Cafe (Cool Café) Chat 1.2.1 where modifyUser.asp can be exploited via a modified nickname value to allow remote attackers to obtain the administrator password and email address. The NVD/CVE records indicate a network-exposed, low-complexit...

CVE-2005-2036: Exposure of Sensitive Information to an Unauthorized Actor

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

Gaim 1.2.1 - URL Handling Remote Stack Overflow

Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...

CVE-2005-0157

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...

phpBBupload.txt

Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...

CVE-2005-0695: Undefined Security Weakness

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may...