4641 matches found
CVE-2005-1737
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to 1 view or modify the project member list or 2 modify the todos list...
CVE-2005-1737: Undefined Security Weakness
Multiple unknown vulnerabilities in PROMS 0.11 allow "non-authorized users" to 1 view or modify the project member list or 2 modify the todos list...
CVE-2004-1844
Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...
CVE-2004-1843
CVE-2004-1843 describes an SQL injection vulnerability in Member Management System 2.1. The flaw allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp. The provided documents do not specify affected versions beyond 2.1, nor any patch or remed...
CVE-2004-1844
The provided documents confirm CVE-2004-1844 is an XSS vulnerability in Member Management System 2.1. The issue allows remote attackers to inject arbitrary script/HTML via the err parameter to error.asp or the register.asp page. No remediation details are present in the provided sources; exploita...
CVE-2004-1843
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...
CVE-2004-1843: Undefined Security Weakness
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...
CVE-2004-1844: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...
-==CoolForum Path Disclosure & Possible SQL Injection==-
/ -------------------------------------------------------- Neo Security Team NST® - Advisory 11 - 20/03/05 -------------------------------------------------------- Program: CoolForum Homepage: http://coolforum.net/ Vulnerable Versions: CoolForum v.0.8.1 beta & Lowers Risk: Low!! Impact: Path...
CVE-2004-1844
Cross-site scripting XSS vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via 1 the err parameter to error.asp or 2 register.asp...
CVE-2004-1863
Multiple cross-site scripting XSS vulnerabilities in XMB aka extreme message board 1.9 beta aka Nexus beta allow remote attackers to inject arbitrary web script or HTML via 1 the u2uheader parameter in editprofile.php, the restrict parameter in 2 member.php, 3 misc.php, and 4 today.php, and 5 an...
XMB < 1.8 SP1 member.php SQL Injection
Binary data 1546.prm...
CVE-2004-0715
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...
CVE-2004-0715
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...
CVE-2004-0715: Undefined Security Weakness
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group membe...
[Full-Disclosure] [ GLSA 200406-04 ] Mailman: Member password disclosure vulnerability
Gentoo Linux Security Advisory GLSA 200406-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2003-0806: Undefined Security Weakness
Buffer overflow in the Windows logon process winlogon in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code...
Vulnerabilities in Member Management System 2.1
Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...
memmansys21.txt
Title: Vulnerabilities in Member Management System 2.1 Software: Member Management System 2.1 Vendor: http://www.expinion.net/software/appmms.asp Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user and adm...