2621 matches found
CVE-2006-1781
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...
Ubuntu 4.10 / 5.04 : util-linux vulnerability (USN-184-1)
David Watson discovered that 'umount -r' removed some restrictive mount options like the 'nosuid' flag. If /etc/fstab contains user-mountable removable devices which specify the 'nosuid' flag which is common practice for such devices, a local attacker could exploit this to execute arbitrary...
CVE-2005-4487
Cross-site scripting XSS vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter...
CVE-2005-4487
RAMSite R|1 CMS 1.0 and earlier is affected by a cross-site scripting (XSS) vulnerability. The issue arises in the searchfield parameter, allowing remote attackers to inject arbitrary web script or HTML. Impact is user-facing script execution, with potential credential or session-related implicat...
CVE-2005-4487
Cross-site scripting XSS vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter...
RAMSite R|1 CMS XSS vuln.
RAMSite R|1 CMS XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html vendor:http://ramsiter1.imikalsen.com/ affected version:1.0 and prior Product Description: The RAMSite R|1 CMS is an advanced, yet easy to use a...
HP-UX PHNE_33790 : s700_800 11.00 r-commands cumulative mega-patch
s700800 11.00 r-commands cumulative mega-patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability hs been identified with HP-UX systems running in Trusted Mode. The vulnerability could be exploited remotely to gain unauthorized access. HPSBUX02072...
SAP R/3 Internet Graphics Server directory traversal
Directory traversal on accesing htdocs folder...
CVE-1999-1573
CVE-1999-1573 covers multiple unknown vulnerabilities in HP-UX 10.00–11.00 r-commands (rshd, rexecd, rlogind, rlogin, remsh, rcp, rexec, rdist). The description indicates attackers could gain privileges or access files via these remote commands, but no concrete root-cause, affected versions beyon...
CVE-1999-1580
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...
CVE-1999-1573
Multiple unknown vulnerabilities in the "r-cmnds" 1 remshd, 2 rexecd, 3 rlogind, 4 rlogin, 5 remsh, 6 rcp, 7 rexec, and 8 rdist for HP-UX 10.00 through 11.00 allow attackers to gain privileges or access files...
CVE-2002-1577
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...
CVE-2002-1578
The default installation of SAP R/3, when using Oracle and SQLnet V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected...
CVE-2003-1035
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does...
CVE-2002-1578
The CVE-2002-1578 detail: default SAP R/3 installation, when used with Oracle and SQLNet V2 3.x–6.10, allows remote attackers to obtain arbitrary SAP data by directly connecting to the Oracle database and executing queries, due to the database not being password-protected. The vulnerability affec...
CVE-2002-1577
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the 1 SAP, 2 SAPCPIC, 3 DDIC, 4 EARLYWATCH, or 5 TMSADM accounts...
CVE-2003-1035
The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does...
CVE-2003-1035
CVE-2003-1035 describes a vulnerability in the default installation of SAP R/3 46C/D where remote attackers can bypass account lockout by using the RFC API instead of the SAPGUI to perform brute-force password guessing, since the SAPGUI lockout does not occur. The description notes that the RFC-b...
CVE-2002-1578
The default installation of SAP R/3, when using Oracle and SQLnet V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected...
CVE-2002-1577
CVE-2002-1577 concerns SAP R/3 versions 2.0B to 4.6D, where multiple clients are installed with default user accounts and passwords. The underlying issue is insecure default credentials that allow remote attackers to gain privileges via accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM...