405 matches found
Code injection
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...
CVE-2007-2635
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...
CVE-2007-2635
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...
CVE-2007-2635
CVE-2007-2635 affects Interchange prior to 5.4.2 (and related lines) with an unspecified vulnerability that allows remote attackers to cause a denial of service (potential server hang) via crafted HTTP requests. Multiple sources confirm the issue and the fix is to upgrade to Interchange 5.4.2 or ...
CVE-2007-2635
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...
CVE-2007-2635: Undefined Security Weakness
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...
CVE-2004-2668
CVE-2004-2668 : Interchange before 4.8.9 has an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via unknown vectors. Affected software: Interchange (web commerce platform). Root cause: improper handling of user input in SQL queries. Impact: potential una...
CVE-2004-2668
SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2004-2668: Undefined Security Weakness
SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
MS Office Products Array Index Bounds Error (unpatched) PoC
Exploit for unknown platform in category dos / poc =========================================================== MS Office Products Array Index Bounds Error unpatched PoC =========================================================== Full archive at http://www.milw0rm.com/sploits/excel03262006.rar Top...
Microsoft Office Products - Array Index Bounds Error (PoC)
Microsoft Office Products - Array Index Bounds Error PoC Full archive at https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1615.rar excel03262006.rar Topic : Microsoft Office 2002 - Excel/Powerpoint/Word.. 10.0.2614.0 = 11.0.5612.0 Date : 02/12/2006 Author :...
redhat Interchange
It seems that 'Red Hat Interchange' ecommerce and dynamic content management application is running in 'Inet' mode on this port. Versions 4.8.5 and earlier are flawed and may disclose contents of sensitive files to attackers. OpenVAS neither checked Interchange version nor tried to exploit the...
redhat Interchange
It seems that SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Note: this service is not a web server, but it looks like it for findservice HEAD...
CVE-2005-3072
SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-3073
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the 1 "mike", 2 "standard", or 3 "foundation" demo, allows attackers to inject Interchange Tag Language ITL elements into the forum/submit.html page...
CVE-2005-3072
CVE-2005-3072 corresponds to a SQL injection in Interchange that affects versions 4.9.3 up to 5.2.0, specifically via the forum/submit.html handling. The vulnerability allows remote attackers to execute arbitrary SQL commands; the exact injection vectors are not clearly described in the provided ...
CVE-2005-3073
Interchange 5.0.1 has an unspecified vulnerability that, when a catalog is created with the demo suites (mike, standard, or foundation), allows injection of Interchange Tag Language (ITL) elements into the forum/submit.html page. Affected products/versions include Interchange 4.9.3, 5.0 before 5....
CVE-2005-3072
SQL injection vulnerability in pages/forum/submit.html in Interchange 4.9.3 up to 5.2.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2005-3073
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the 1 "mike", 2 "standard", or 3 "foundation" demo, allows attackers to inject Interchange Tag Language ITL elements into the forum/submit.html page...
CVE-2005-3073: Undefined Security Weakness
Unspecified vulnerability in Interchange 5.0.1 allows attackers 4.9.3, 5.0 before 5.0.2, and 5.2, when a catalog has been created using the 1 "mike", 2 "standard", or 3 "foundation" demo, allows attackers to inject Interchange Tag Language ITL elements into the forum/submit.html page...