CVE-2001-1286: Undefined Security Weakness

Ipswitch IMail 7.04 and earlier stores a user's session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker's control...

CVE-2001-0835

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in 1 search keywords embedded in HTTP referrer information, or 2 host names that are retrieved via a reverse DNS lookup...

CVE-2001-0835

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in 1 search keywords embedded in HTTP referrer information, or 2 host names that are retrieved via a reverse DNS lookup...

CVE-2001-0835: Undefined Security Weakness

Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in 1 search keywords embedded in HTTP referrer information, or 2 host names that are retrieved via a reverse DNS lookup...

CVE-2001-0460: Undefined Security Weakness

Websweeper 4.0 does not limit the length of certain HTTP headers, which allows remote attackers to cause a denial of service memory exhaustion via an extremely large HTTP Referrer: header...

CVE-2000-0623: Undefined Security Weakness

Buffer overflow in O'Reilly WebSite Professional web server 2.4 and earlier allows remote attackers to execute arbitrary commands via a long GET request or Referrer header...

valueclick-cgi.txt

Date: Sat, 19 Dec 1998 17:19:34 +0200 From: Philip Stoev Reply-To: Bugtraq List To: [email protected] Subject: ValueClick CGI Vulnerability The following text is in the "KOI8-R" character set. Your display is set for the "US-ASCII" character set. Some characters may be displayed incorrectly. T...