CVE-2004-2463: Undefined Security Weakness

Buffer overflow in ADA Image Server ImgSvr 0.4 allows remote attackers to cause a denial of service web server crash or execute arbitrary code via a long GET request...

CVE-2004-2416

CVE-2004-2416 is a buffer overflow in CCProxy’s Telnet proxy ping command for CCProxy v6.2 and earlier. The stack can be overwritten by sending an overly long address to the ping (p) command, allowing remote code execution on vulnerable Windows systems. Public proof‑of‑concepts and exploits exist...

CVE-2004-2416

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-2416: Undefined Security Weakness

Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-2323

DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config...

CVE-2004-2316: Undefined Security Weakness

Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service crash via a GET request containing an MS-DOS device name such as COM1...

CVE-2002-2094: Observable Discrepancy

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct...

CVE-2005-2420

CVE-2005-2420 affects FtpLocate 2.02 (flsearch.pl) and allows remote command execution by injecting shell metacharacters through HTTP GET. Connected Nessus plugin NASL confirms a remote file inclusion style input manipulation via the fsite parameter, enabling arbitrary command execution on the af...

CVE-2005-2420

flsearch.pl in FtpLocate 2.02 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP GET request...

Netquery <= 3.1 Multiple Vulnerabilities

The remote host is running Netquery, a suite of network information utilities written in PHP. The version of Netquery on the remote host suffers from multiple flaws : - Remote Code Execution An attacker can execute arbitrary commands through the Ping panel of the 'nquser.php' script provided it's...

CVE-2004-2271

CVE-2004-2271 affects MiniShare webserver versions 1.4.1 and earlier. The vulnerability is a remote buffer overflow in the HTTP request handling, originally demonstrated via a long GET request, which can be exploited to execute arbitrary code. Connected exploits and payloads show that not only GE...

CVE-2004-2271

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2004-2271: Undefined Security Weakness

Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request...

Oracle Reports Server 6.0.8/9.0.x - Unauthorized Report Execution

source: https://www.securityfocus.com/bid/14316/info Oracle Reports Server is susceptible to an unauthorized report execution vulnerability. By placing a report file in a globally accessible location, users can trigger the execution of the report by issuing an HTTP GET request to the affected...

CVE-2004-2221

CVE-2004-2221 describes a buffer overflow in the SoftCart.exe CGI of Mercantec SoftCart 4.00b. The vulnerability allows remote attackers to execute arbitrary code by sending a long parameter in an HTTP GET request. Public references show Metasploit and Exploit-DB demonstrations of an exploit for ...

CVE-2004-2224

Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service crash via an HTTP GET request that contains MS-DOS device names such as com1...

CVE-2004-2221: Undefined Security Weakness

Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request...

Buffer overflow in PlanetWeb

Heap overflow on oversized GET request. Buffer overflow on oversized FTP request...

EUVD-2002-1883

Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request...

CVE-2002-1904

CVE-2002-1904 describes a buffer overflow in the Log function of GazTek ghttpd 1.4–1.4.3 (util.c) that can be triggered by a long HTTP GET request, enabling remote code execution. The vulnerability is risk-labeled as high (CVSS base score 7.5) with network access, no authentication, and the poten...