Lucene search
+L

449 matches found

NVD
NVD
•added 2007/07/05 8:30 p.m.•26 views

CVE-2007-3580

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

4.3CVSS6.8AI score0.0105EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2007/07/05 8:00 p.m.•35 views

CVE-2007-3580

PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, which allows user-assisted remote attackers to inject arbitrary web script...

6.8AI score0.0105EPSS
SaveExploits0References4
Prion
Prion
•added 2007/05/13 11:19 p.m.•24 views

Information disclosure

Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to 1 index.php, 2 feed.php, 3 prefs.php, and 4 todolist.php; and 5 classTodoItem.php and 6 phpTodoUser.php in libs/. NOTE: some of these details are obtained fro...

6.8CVSS7.3AI score0.01165EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/07/14 12:00 a.m.•8 views

CVE-2001-1552: Undefined Security Weakness

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...

5CVSS5.8AI score0.13903EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2005/05/27 4:00 a.m.•35 views

CVE-2004-2100

GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a encoded newlines...

6.9AI score0.01446EPSS
SaveExploits0References1
CVE
CVE
•added 2005/05/27 4:00 a.m.•72 views

CVE-2004-2100

CVE-2004-2100 concerns GeoHttpServer, where, when configured to authenticate users, an attacker can bypass authentication and access unauthorized files by supplying a URL containing %0a%0a (encoded newlines). Affected software: GeoHttpServer (authentication-enabled configuration). Root cause: cra...

5CVSS7.3AI score0.01446EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2004/12/31 5:00 a.m.•29 views

CVE-2004-2100

GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a encoded newlines...

5CVSS6.9AI score0.01446EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/09/19 12:00 a.m.•5 views

CVE-2002-1567: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script...

6.8CVSS6.3AI score0.27079EPSS
SaveExploits2References1
NVD
NVD
•added 2002/10/04 4:00 a.m.•25 views

CVE-2002-0919

CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page...

7.5CVSS6.4AI score0.03101EPSS
SaveExploits3References3
Rows per page
Query Builder