CVE-2005-2952

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

CVE-2005-2952

Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...

CVE-2005-2952

The CVE-2005-2952 entry concerns a directory traversal vulnerability in Subscribe Me Pro (versions up to 2.044.09P and earlier). The issue arises from a dot-dot (.. ) path traversal in the l parameter of s.pl, allowing remote attackers to read arbitrary files. Affects Subscribe Me Pro 2.044.09P a...

subpro204409P.txt

------=Part56326909740.1126618894612 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline ------------------------------------------------------ HYA-2005-006 h4cky0u.org Advisory 007...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

Subscribe Me Pro 2.44 - S.pl Directory Traversal source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of...

[Full-disclosure] Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability

-------------------------------------------------------------- HYA-2005-006 h4cky0u.org Advisory 007 -------------------------------------------------------------- Date - Tue Sep 13 2005 TITLE: ====== Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability SEVERITY: ========= High...

CVE-2005-0058

Buffer overflow in the Telephony Application Programming Interface TAPI for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message...

Microsoft Internet Explorer Unspecified SharePoint Portal Services Log Sink ActiveX Vulnerability

Description Microsoft Internet Explorer is prone to an unspecified vulnerability in the SharePoint Portal Service Log Sink ActiveX control. The vendor has not released any further information about this vulnerability other than to state the "kill bit" has been set on unsupported versions of the...

Arbitrary code execution in SlimFTPd v3.16

Arbitrary code execution in SlimFTPd v3.16 discovered by Raphal Rigo Product: SlimFTPd by WhitSoft Development Affected Version: 3.16 verified, =3.16 probably too Not affected Version: 3.17 OS affected: All Win32 Risk: Critical Remote Exploit: yes URL: http://www.whitsoftdev.com/slimftpd/ Overvie...

CVE-2001-1552

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...

CVE-2001-1552

CVE-2001-1552 affects Windows ME where the service ssdpsrv.exe can be triggered remotely to cause a denial of service by sending multiple newline characters in an SSDP message. The NVD/CVE records describe the vulnerability as a DoS condition without mentioning code-level details, impacted versio...

Microsoft Internet Explorer - 'javaprxy.dll' COM Object Remote Overflow

Bindshell on port 28876 - Based on Berend-Jan Wever's IE exploit 01 July 2005 Description - http://www.frsirt.com/english/advisories/2005/0935 Workarounds - http://www.microsoft.com/technet/security/advisory/903144.mspx sec-consult - http://www.sec-consult.com/184.html Solution : Set Internet and...

CVE-2002-1940

LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...

CVE-2002-1627

Technical details about CVE-2002-1627 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1627

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. dot dot sequences in the quiz parameter...

CVE-2004-2555

Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography arithmetic and XOR operations to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recove...

CVE-2004-0214

CVE-2004-0214 is a remote code execution vulnerability in the Windows Shell (Shell32) that stems from an unchecked/buffered input condition in the Shell’s handling of messages when launching applications. An attacker could entice a user to visit a malicious Web page or open a crafted file, potent...

CVE-2004-0214

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service application crash and possibly execute arbitrary code via long share names, as demonstrated using Samba...

CVE-2003-0016

Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names...

CVE-2003-0009

CVE-2003-0009 is an XSS vulnerability in the Help and Support Center (HSC) of Windows Me (and XP) where hcp:// URIs pass arbitrary script in the topic parameter. The CERT/CC entry and CERT/CC notes explain that HSC does not adequately validate hcp:// URI parameters, allowing an attacker to cause ...