PHP-Coolfile 1.4 Unauthorized Administrative Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9018/info PHP-Coolfile allows unauthorized administrative access due to an error in the way access is evaluated in the action.php file. This could allow a remote user to obtain the administrative username and password for...

Technote 2000/2001 'board' Function File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2155/info Technote Inc. offers a Multicommunication Package which includes a web board type of service. A script that ships with Technote, print.cgi, accepts a parameter called board. This remotely-supplied variable is us...

Alt-N MDaemon 3.1.1 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1689/info Alt-N MDaemon 3.1.1 is subject to a denial of service. If a remote user requests a specially crafted URL to the web services within MDaemon the service will crash. A restart of the service is required in order t...

IBM Websphere/Net.Commerce 3 CGI-BIN Macro Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2588/info Net.Commerce is part of the Websphere platform of products distributed by IBM. Net.Commerce provides several versatile features to facilitate e-commerce, and features in performance and reliability. A problem in...

YABB SE 1.x SSI.PHP ID_MEMBER SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9449/info A problem with YaBB SE could make it possible for a remote user launch SQL injection attacks. It has been reported that a problem exists in the SSI.php script distributed as part of YaBB SE. Due to insufficient...

Kootenay Web Inc whois 1.0 - Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1883/info whois is a utility used to find general information and technical details about registered domain names. A vulnerability exists in Kootenay Web Inc's Whois release v.1.9, a web interface to whois running on a...

ZyXEL Prestige 681 SDSL Router IP Fragment Reassembly Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3711/info Prestige is a product line of DSL routers produced and distributed by Zyxel. When a Zyxel router receives fragmented packets that after reassembly is greater than 64 kilobytes in length, the router crashes. The...

YABB 1.4.1 SE Reminder.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6591/info It has been reported that a problem exists in the Reminder.php script distributed as part of YaBB SE. Due to insufficient sanitizing of input, it is possible for a remote user to inject arbitrary SQL into the...

Netscape Enterprise Web Server for Netware 4/5 5.0 Information Disclosure

No description provided by source. source: http://www.securityfocus.com/bid/4874/info It has been reported that Netscape Enterprise Web Server may disclose path and system information to a remote user. Netscape Enterprise Web Server for Netware contain several sample files which leak system...

Jason Rahaim MP3Mystic 1.0.x Server Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2699/info A vulnerability exists in Jason Rahaim's MP3Mystic Server which allows a remote user to traverse the directories of a target host. This may lead to the disclosure of file and directory contents. Arbitrary...

AHG Search Engine 1.0 Search.CGI Arbitrary Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3985/info Search.CGI is a component of the HTMLsearch Search Engine software distributed by AHG. The software is available for the Unix, Linux, and Microsoft platforms. The search.cgi script included with the AHG Search...

Working Resources BadBlue 1.2.7 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2392/info It is possible for a remote user to cause a denial of service condition in Working Resources BadBlue. Requesting a specially crafted URL composed of 284 or more bytes, will cause the server to crash. A restart o...

redaxscript 0.3.2 - Multiple Vulnerabilities

No description provided by source. ================================== Vulnerability ID: HTB22805 Reference: http://www.htbridge.ch/advisory/pathdisclosureinredaxscript.html Product: Redaxscript Vendor: http://redaxscript.com/ http://redaxscript.com/ Vulnerable Version: 0.3.2 Vendor Notification: ...

tinyserver 1.1 - Directory Traversal

No description provided by source. source: http://www.securityfocus.com/bid/9485/info TinyServer is prone to multiple vulnerabilities. A directory traversal issue is present in TinyServer that could allow a remote user to view or download any file to which the server has access. A denial of servi...

wu-ftpd 2.4.2/2.5 .0/2.6 .0/2.6.1/2.6.2 - FTP Conversion Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2240/info Some FTP servers provide a conversion service that pipes a requested file through a program, for example a decompression utility such as tar, before it is passed to the remote user. Under some configurations whe...

XMB Forum 1.8 u2uadmin.php uid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...

hammer software metagauge 1.0.0.17 - Directory Traversal vulnerability

No description provided by source. Title: MetaGauge 1.0.0.17 Directory Traversal ------------------------------------------------------------- Vendor: Hammer Software Vendor URL: www.Hammer-Software.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest...

robin twombly a1 http server 1.0 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2436/info It is possible for a remote user to gain read access to directories and files outside the web root. Requesting a specially crafted URL composed of '../' sequences will disclose an arbitrary directory, appending...

GNU Ffingerd 1.19 Username Validity Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1841/info A vulnerability in Ffingerd version 1.19, the popular remote user-information server, which allows a remote user to determine whether or not a given username exists on the system. Normally, if a user has decline...

Red Hat Linux 7.0 Apache Remote Username Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3335/info Versions of Apache webserver shipping with Red Hat Linux 7.0 and possibly other Apache distributions install with a default misconfiguration which could allow remote users to determine whether a give username...