1386 matches found
CVE-2002-1457
SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter...
CVE-2002-1457
CVE-2002-1457 targets L-Forum 2.40. It describes a SQL injection in search.php via the search parameter that could allow remote attackers to execute arbitrary SQL statements. The connected documents confirm the affected software (L-Forum 2.40) and the vulnerable component (search.php) with the un...
CVE-2002-1459: Undefined Security Weakness
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...
CVE-2002-1458: Undefined Security Weakness
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, 3 Subject and 4 Body...
CVE-2002-1457: Undefined Security Weakness
SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter...
CVE-2002-1460: Undefined Security Weakness
L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...
L-Forum XSS and upload spoofing
L-Forum XSS and upload spoofing PROGRAM: L-Forum VENDOR: Leszek Krupinski [email protected] HOMEPAGE: http://l-forum.x-php.net/ VULNERABLE VERSIONS: 2.4.0, possibly others IMMUNE VERSIONS: none, but an official patch is available for some issues SEVERITY: high LOGIN REQUIRED: no DESCRIPTION: "L-Foru...
L-Forum Vulnerability - SQL Injection
I have discovered an SQL injection flaw in L-Forum which has a recent record upload spoofing/XSS by Ulf of security bugs. The problem this time is search.php. It doesn't properly escape the SQL data passed in by the user in the search member. I have provided a SourceForge patch for this...
Leszek Krupinski L-Forum 2.4 - Search Script SQL Injection
Leszek Krupinski L-Forum 2.4 - Search Script SQL Injection source: https://www.securityfocus.com/bid/5468/info Reportedly, L-Forum is vulnerable to SQL injection attacks. The vulnerability lies in the file 'search.php' L-Forum does not properly sanitize user input that is used as part of the sear...
Leszek Krupinski L-Forum 2.4 - Search Script SQL Injection
source: https://www.securityfocus.com/bid/5468/info Reportedly, L-Forum is vulnerable to SQL injection attacks. The vulnerability lies in the file 'search.php' L-Forum does not properly sanitize user input that is used as part of the search parameter in the 'search.php' file. SQL code may be...
CVE-2001-1358: Undefined Security Weakness
Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library file in the L localization parameter...
CVE-2001-1310: Undefined Security Weakness
IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, via invalid encodings for the L field of a BER encoding, as demonstrated by the PROTOS LDAPv3 test suite...
CVE-2001-1198: Undefined Security Weakness
RLPDaemon in HP-UX 10.20 and 11.0 allows local users to overwrite arbitrary files and gain privileges by specifying the target file in the -L option...
CVE-2000-1195: Undefined Security Weakness
telnet daemon telnetd from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option...
CVE-2000-1028: Undefined Security Weakness
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument...
CVE-2000-0632
The CVE-2000-0632 entry concerns a buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier. The vulnerability allows remote attackers to execute arbitrary commands via a long query string. Public sources (NVD/CVE records and CVE List) consistently describe this as a remot...
CVE-2000-0632
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string...
CVE-2000-0632: Undefined Security Weakness
Buffer overflow in the web archive component of L-Soft Listserv 1.8d and earlier allows remote attackers to execute arbitrary commands via a long query string...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Network Associates, Inc. COVERT Labs Security Advisory July 17, 2000 LISTSERV Web Archive Remote Overflow COVERT-2000-07 o Synopsis The L-Soft LISTSERV web archive wa,wa.exe component contains an unchecked buffer allowing remote execution of arbitrary...
