CVE-2002-0257

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields 1 TITLE, 2 DESCTIT, 3 DESC, 4 searchstring, 5 ALIAS, 6 EMAIL, 7 ADDRESS1, 8 ADDRESS2, 9 ADDRESS3, 10 PHONE1, 11 PHONE2, 12 PHONE3, or ...

CVE-2002-0257

Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields 1 TITLE, 2 DESCTIT, 3 DESC, 4 searchstring, 5 ALIAS, 6 EMAIL, 7 ADDRESS1, 8 ADDRESS2, 9 ADDRESS3, 10 PHONE1, 11 PHONE2, 12 PHONE3, or ...

CGIScript.net - csMailto Hidden Form Field Remote Command Execution

CGIScript.net - csMailto Hidden Form Field Remote Command Execution source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration...

CGIScript.net - csMailto Hidden Form Field Remote Command Execution

source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration values used by the script are contained in hidden form values. As a...

CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address...

CVE-2002-0136

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...

CVE-2002-0108

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address...

CVE-2001-1188

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...

CVE-2002-0136

CVE-2002-0136 affects Microsoft Internet Explorer 5.5 on Windows 98. The vulnerability enables a remote web page to trigger a denial-of-service (hang) by sending extremely long values in form fields (INPUT/TEXTAREA) that can be auto-filled via JavaScript. The available sources describe the affect...

CVE-2001-1188

The CVE-2001-1188 entry concerns mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier. The vulnerability arises because remote attackers can modify hidden form fields (sendto, email, server, subject, resulturl) to cause the program to send SPAM via remote servers. Affected component is the mail...

CVE-2001-1188: Undefined Security Weakness

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...

CVE-2002-0108: Undefined Security Weakness

Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address...

CVE-2002-0136: Undefined Security Weakness

Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service hang via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript...

CVE-2002-0091: Undefined Security Weakness

Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields...

CVE-2001-1188

mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...

CVE-1999-1016

CVE-1999-1016 concerns the Microsoft HTML control used in Internet Explorer 5.0, FrontPage Express, Outlook Express 5, and Eudora. The vulnerability allows a remote attacker (via a malicious web site or HTML email) to trigger a denial of service by crafting large HTML form fields (e.g., text inpu...

CVE-2000-0253

CVE-2000-0253 affects the Dansie Shopping Cart, specifically the cart.pl component, where remote attackers can modify sensitive purchase information through hidden form fields. The CVSSv2 vector (AV:N/AC:L/Au:N/C:C/I:C/A:C) yields a base score of 10.0 (HIGH), indicating complete confidentiality, ...

CVE-2000-0860

The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...

CVE-2000-0253

The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...

CVE-2000-0860: Undefined Security Weakness

The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables...