CVE-2005-4688

PunBB 1.2.9 does not require password entry when changing the e-mail address in an account's profile, which might allow an attacker to make an address change via a hijacked login session...

CVE-2005-4136

Cross-site scripting XSS vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter...

osTicket <= 1.2.7 Support Address DoS Vulnerability

The target is running at least one instance of osTicket 1.2.7 or earlier. Such versions are subject to a denial of service attack in open.php if osTicket is configured to receive mails using aliases. Copyright C 2005 George A. Theall Some text descriptions might be excerpted from a referenced...

CVE-2005-2662

masqmail before 0.2.18 allows remote attackers to execute arbitrary commands via crafted e-mail addresses that are not properly sanitized when creating a failed delivery message...

CVE-2002-1842: Undefined Security Weakness

Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in 1 a word that is being spell checked or 2 an e-mail address...

CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2036

The CVE-2005-2036 entry describes a vulnerability in Cool Cafe (Cool Café) Chat 1.2.1 where modifyUser.asp can be exploited via a modified nickname value to allow remote attackers to obtain the administrator password and email address. The NVD/CVE records indicate a network-exposed, low-complexit...

CVE-2005-2036: Exposure of Sensitive Information to an Unauthorized Actor

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

CVE-2005-2036

modifyUser.asp in Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value...

Gaim 1.2.1 - URL Handling Remote Stack Overflow

Gaim 1.2.1 - URL Handling Remote Stack Overflow // Written by Ron // Friday, May 13, 2005 // // This is a very weak demonstration of Gaim 1.2.1's stack overflow vulnerability // when processing email addresses. What this basically does is segfault you when you // do a /vuln command in a...

CVE-2005-0157

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...

phpBBupload.txt

Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...

CVE-2005-0695: Undefined Security Weakness

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

CVE-2005-0695

The password recovery feature forgotpassword.asp in Hosting Controller 6.1 Hotfix 1.7 and earlier allows remote attackers to determine the owner's e-mail address by providing a portion of the domain name to the "login ID" field...

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities

Hosting Controller 1.x6.1 - Multiple Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/12748/info Hosting Controller is reported prone to multiple information disclosure vulnerabilities. These issues can allow an attacker to disclose sensitive information, which may...

CVE-2005-0107

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

CVE-2005-0107

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

CVE-2005-0107: Undefined Security Weakness

bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands...

Obscure email addresses in Confluence Mail

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-2677. panel Just noticed that http://confluence.atlassian.com/spaces/viewmailarchive.action?key=DOC is showing my full email...

CVE-2004-2226

Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets CSS document on the attacker's server...