CVE-2007-1037: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code via a .nzb file with a long subject field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1038: Undefined Security Weakness

Shemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of service application crash via a .nzb file with a subject field containing ';' semicolon characters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-1041: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long 1 group or 2 subject string...

News File Grabber 4.1.0.1 - Subject Line Stack Buffer Overflow (1)

source: https://www.securityfocus.com/bid/22617/info News File Grabber is prone to a remote stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows...

BtitTracker 1.4 XSS

BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...

CVE-2007-0544

Cross-site scripting XSS vulnerability in private.php in MyBB aka MyBulletinBoard allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949...

CVE-2007-0544

Cross-site scripting XSS vulnerability in private.php in MyBB aka MyBulletinBoard allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949...

CVE-2007-0544: Undefined Security Weakness

Cross-site scripting XSS vulnerability in private.php in MyBB aka MyBulletinBoard allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949...

Design/Logic Flaw

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...

CVE-2006-6283

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of 1 a private message PM or 2 a bulletin board post...

CVE-2006-6283

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of 1 a private message PM or 2 a bulletin board post...

CVE-2006-6283: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of 1 a private message PM or 2 a bulletin board post...

CVE-2006-6159

Multiple cross-site scripting XSS vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 message or 2 subject parameter...

CVE-2006-6159: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 message or 2 subject parameter...

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-5902

viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by 1 a GMAILFS: 13;a;1 message with a new filename and a file attachment, which injects a new file into the filesystem; 2 a GMAILFS:...

CVE-2006-4088

Multiple cross-site scripting XSS vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject, 2 Comment, and 3 Add new comment sections...

CVE-2006-4088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the 1 Subject, 2 Comment, and 3 Add new comment sections...

CVE-2006-4079: Undefined Security Weakness

Cross-site scripting XSS vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter aka the topic title field...

CVE-2006-3303: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 subject or 2 to parameters...