CVE-2005-1969

The CVE-2005-1969 entry describes a cross-site scripting (XSS) vulnerability in Pragma Systems Telnetserver 6.0 that allows remote attackers to inject arbitrary web script or HTML and hide activities in log files by inserting an HTML comment "

CVE-2005-1969

Cross-site scripting XSS vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "!--" HTML comment in a session...

Pragma TelnetServer crossite scripting

Crossite scripting if log files are stored in HTML format...

CVE-2005-1909

The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...

CVE-2005-1909

The CVE-2005-1909 entry concerns the 602LAN SUITE 2004 web server control panel where remote attackers can disrupt administrator log readability by sending a GET request containing a

PHP Stat Administrative User Authentication Bypass

=========================================================== ============================================================ Title: PHP Stat Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 25/05/2005 Severity: Medium. PHP Stat Administrative User Authentication...

CVE-2005-0392

CVE-2005-0392 is a local privilege-escalation flaw in the ppxp PPP program where root privileges are not dropped when opening potentially user-supplied log files, enabling an unprivileged user to trigger a root shell. This is discussed in Debian advisories DSA-725-1/DSA-725-2 and mirrored in Open...

CVE-2005-0392

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...

CVE-2005-0392

ppxp does not drop root privileges before opening log files, which allows local users to execute arbitrary commands...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges...

CVE-2005-1606

CVE-2005-1606 affects H-Sphere Winbox 2.4.2 and 2.4.3 RC1. The underlying issue is that usernames and passwords are stored in plaintext in world-readable log files, enabling local users to gain privileges. The documents do not provide explicit exploit details, affected components beyond the log l...

CVE-2005-1516

DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...

CVE-2005-1516

The CVE-2005-1516 issue affects NetWin DMail 3.1a’s DList component. The vulnerability enables a remote attacker to bypass authentication, read log files, and shut down the system by sending a log request (sendlog) with an incorrect password hash, which is not properly handled by the internal _cm...

CVE-2005-1516

DList dlist.exe in DMail 3.1a allows remote attackers to bypass authentication, read log files, and shutdown the system via a sendlog command with an incorrect password hash, which is not properly handled by the cmdsendlog function...

Positive Software H-Sphere Winbox 2.4 - Sensitive Logfile Content Disclosure

source: https://www.securityfocus.com/bid/13559/info It is reported that Positive Software H-Sphere Winbox stores user account information in a plaintext format inside of application log files. As a result, user credentials could be exposed to other local users who have permissions to access the...

CVE-2005-1167

Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information...

CVE-2005-0549

Cross-site scripting XSS vulnerability in Solaris AnswerBook2 Documentation 1.4.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the "View Log Files" function...

CVE-2005-1167

Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information...

CVE-2005-1167

Technical details about CVE-2005-1167 are not publicly provided in the supplied documents. The materials only note that Musicmatch 10.00.2047 and earlier store logs in Program Files; no affected versions, exploit info, or fixes are listed. Monitor for updates.