70 matches found
CGIScript.net - csMailto Hidden Form Field Remote Command Execution
source: https://www.securityfocus.com/bid/4579/info CGIScript.NET csMailto is a Perl script designed to support multiple mailto: forms. A vulnerability has been reported in some versions of this script. Reportedly, configuration values used by the script are contained in hidden form values. As a...
CVE-2002-0108
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address...
CVE-2001-1188
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...
CVE-2001-1188
The CVE-2001-1188 entry concerns mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier. The vulnerability arises because remote attackers can modify hidden form fields (sendto, email, server, subject, resulturl) to cause the program to send SPAM via remote servers. Affected component is the mail...
CVE-2001-1188
mailto.exe in Brian Dorricott MAILTO 1.0.9 and earlier allows remote attackers to send SPAM e-mail through remote servers by modifying the sendto, email, server, subject, and resulturl hidden form fields...
CVE-2000-0253
The dansie shopping cart application cart.pl allows remote attackers to modify sensitive purchase information via hidden form fields...
CVE-2000-0860
The CVE-2000-0860 entry concerns PHP 3 and PHP 4 file-upload handling. The vulnerability arises from RFC 1867-based file uploads where an attacker can manipulate hidden form field names that correspond to internal PHP variables, enabling reading of arbitrary files. Public documentation in connect...
CVE-2000-0860
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables...
CVE-2000-0102
CVE-2000-0102 concerns the SalesCart shopping cart where remote attackers can modify sensitive purchase information through hidden form fields. The issue affects SalesCart as described in multiple records; the PT-2000-1090 entry confirms the vulnerability exists in SalesCart with no publicly docu...
CVE-2000-0103
The CVE-2000-0103 entry concerns the SmartCart shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields. The core issue is the manipulation of hidden fields used in purchase workflows, enabling partial breaches of confidentiality and i...
CVE-2000-0123
CVE-2000-0123 describes a vulnerability in the Filemaker shopping cart application where remote attackers can alter sensitive purchase information by manipulating hidden form fields. The available sources confirm the issue exists in the shopping cart component shipped with Filemaker, enabling inf...
CVE-2000-0137
The CartIt shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0136
The Cart32 shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...
CVE-2000-0108
CVE-2000-0108 concerns the Intellivend shopping cart application, where remote attackers can modify sensitive purchase information through hidden form fields in the application. The issue affects the Intellivend shopping cart software (specific affected versions are not provided in the connected ...
CVE-2000-0134
The Check It Out shopping cart application contains a vulnerability that allows remote attackers to modify sensitive purchase information via hidden form fields. Described across CVE-2000-0134 sources, this flaw enables unauthenticated remote access with partial confidentiality and integrity impa...
CVE-2000-0104
CVE-2000-0104 concerns the Shoptron shopping cart application. The connected PT-2000-1092 entry confirms that remote attackers could modify sensitive purchase information via hidden form fields in the Shoptron cart. The PT entry notes that affected versions are not specified and provides no remed...
CVE-2000-0137
The CartIt shopping cart application is affected by a vulnerability where remote attackers can modify sensitive purchase information through hidden form fields. The affected component appears to be the client-side forms used to submit order data, with the underlying issue not explicitly detailed ...
CVE-2000-0106
The CVE-2000-0106 entry concerns the EasyCart shopping cart application, where the vulnerability stems from remote modification of sensitive purchase information through hidden form fields in the application. The PT-2000-1094 entry confirms EasyCart as affected, but does not specify affected vers...