3472 matches found
Softwin BitDefender AvxScanOnlineCtrl COM Object Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10175/info Reportedly the BitDefender AvxScanOnlineCtrl COM object is affected by an information disclosure vulnerability. This issue is due to a design error that allows a remote user to execute a method in the offending...
Active Bulletin Board <= 1.1b2 Remote User Pass Change Exploit
No description provided by source...
Way-Board 2.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2370/info A remote user could gain read access to known files outside of the root directory where Way-Board resides. Requesting a specially crafted URL composed of '%00' sequences along with the known filename will disclo...
XMB Forum 1.8 forumdisplay.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
Red Hat Linux 7.0 Apache Remote Username Enumeration Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whether a give username...
Tarantella Enterprise 3 3.x TTAWebTop.CGI Arbitrary File Viewing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2890/info Tarantella Enterprise 3 is a tool for centralized management of data and applications. It is operated via a web interface. It will run on a number of Unix and Linux distributions. ttawebtop.cgi is a CGI script...
Flat PHP Board <= 1.2 - Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
XMB Forum 1.8 BBcode align Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
BRS WebWeaver 0.x FTP Root Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2676/info BRS WebWeaver is an ftpd and webserver from Blaine Southam. WebWeaver's FTP component has a flaw which can permit a remote user to learn the physcial path to the FTP service's root directory. By submitting the F...
Hughes Technologies DSL_Vdns 1.0 - Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2700/info It is possible for a remote user to cause a denial of service on a host running DSLVdns. Submitting data to port 6070 and closing the connection before the request is fulfilled, will cause DSLVdns to enter a...
QuickCommerce 2.5/3.0,Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability
No description provided by source. E-Commerce Exchange QuickCommerce 2.5/3.0,McMurtrey/Whitaker & Associates Cart32 2.5 a/3.0,Shop Express 1.0,StoreCreator 3.0 Web Shopping Cart Hidden Form Field Vulnerability source: http://www.securityfocus.com/bid/1237/info Various shopping cart applications u...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (5)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
MS IIS 4.0/5.0 and PWS Extended Unicode Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot ../ directory traversal exploitation if extended UNICODE character representations are used in substitution for / and . Unauthenticated users may acces...
Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently...
TinyServer 1.1 - Denial of Service
No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...
3R Soft MailStudio 2000 2.0 userreg.cgi Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/1335/info MailStudio 2000 is vulnerable to multiple attacks. It is possible for a remote user to gain read access to all files located on the server via the usage of the /.. string passed to a CGI, thereby compromising th...
netwin netauth 4.2 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1587/info A remote user is capable of gaining read access to any known file residing on a host running Netwin Netauth through directory traversal. Appending a series of '../' and the desired file name to the 'page' variab...
GNU Ffingerd 1.19 Username Validity Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has decline...
4images 1.7.9 - Multiple Vulnerabilities
No description provided by source. ================================ Vulnerability ID: HTB22950 Reference: http://www.htbridge.ch/advisory/sqlinjectionin4images.html Product: 4images Vendor: http://www.4homepages.de/ http://www.4homepages.de/ Vulnerable Version: 1.7.9 Vendor Notification: 07 April...
XFree86 X11R6 3.3.5/3.3.6/4.0 Xserver Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1235/info A denial of service exists in XFree86 3.3.5, 3.3.6 and 4.0. A remote user can send a malformed packet to the TCP listening port, 6000, which will cause the X server to be unresponsive for some period of time...