3424 matches found
Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection
Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using...
Web4Future Affiliate Manager PRO SQL inj. vuln.
Web4Future Affiliate Manager PRO SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html vendor:http://www.web4future.com/products.php?p=aff affected version:4.1 and prior Product Description: Affilia...
CVE-2005-3993: Undefined Security Weakness
Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service crash via invalid IMAP commands...
Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
CVE-2005-3813
IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...
CVE-2005-3813
IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...
CVE-2005-3813: Undefined Security Weakness
IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...
CVE-2005-3690
Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...
CVE-2005-3691
Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...
CVE-2005-3690
Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...
CVE-2005-3691: Undefined Security Weakness
Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...
CVE-2005-3690: Undefined Security Weakness
Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...
MailEnable HTTPMail Service GET Overflow Vulnerability
The target is running at least one instance of MailEnable - http://www.mailenable.com/ - that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which...
MailEnable IMAP Service Search DoS Vulnerability
The target is running at least one instance of MailEnable's IMAP service. A flaw exists in MailEnable Professional Edition versions 1.5a-d that results in this service crashing if it receives a SEARCH command. An authenticated user could send this command either on purpose as a denial of service...
MUP overlong request kernel overflow Patch (Q311967)
Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...
CVE-2004-2501: Undefined Security Weakness
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...
CVE-2005-3155
CVE-2005-3155 concerns a buffer overflow in the W3C logging functionality of MailEnable IMAPD. Publicly documented impact indicates remote code execution against MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. Exploit references (Metasploit module and SAINT/pack...
CVE-2005-3155: Undefined Security Weakness
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code...