CVE-2005-1599

The CVE-2005-1599 entry describes a cross-site scripting (XSS) flaw in Kryloff Technologies Subject Search Server (SSServer) 1.1, exploitable via the "Search For" field to inject arbitrary web script/HTML. The NVD/CVE records show a MEDIUM risk (CVSSv2: AV:N/AC:M/Au:N/C:N/I:P/A:N, base 4.3) but n...

CVE-2005-1599

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

CVE-2005-1599

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

CVE-2005-1599: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Kryloff Technologies Subject Search Server SSServer 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field...

CVE-2005-1562: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MaxWebPortal 1.3.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 fpassword parameter to incfunctions.asp, 2 txtAddress, 3 message, or 4 subject parameter to postinfo.asp, 5 andor parameter to search.asp, 6 verkey parameter...

CVE-2004-2003

Buffer overflow in the sslprcert function in the SSLway filter sslway.c for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long 1 subject or 2 issuer name field...

CVE-2004-1982: Undefined Security Weakness

Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field...

CVE-2004-2030: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject...

CVE-2005-0982

Multiple cross-site scripting XSS vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 location, or 3 Subject field...

CVE-2005-0982: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Yet Another Forum.net 0.9.9 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 location, or 3 Subject field...

CVE-2002-1648: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified sendto and subject parameters...

CVE-2005-0846

Multiple cross-site scripting XSS vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the 1 message subject or 2 message header field...

CVE-2005-0846: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the email auto-reply message in SurgeMail 2.2g3 allow remote attackers to inject arbitrary web script or HTML via the 1 message subject or 2 message header field...

CVE-2004-1499

Cross-site scripting XSS vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field...

CVE-2004-1499: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field...

CVE-2005-0221: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.php in Gallery 2.0 Alpha allows remote attackers to inject arbitrary web script or HTML via the g2formsubject field...

CVE-2003-0966: Undefined Security Weakness

Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line...

mod_ssl ssl_util_uuencode_binary CA issue

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...

DEBIAN-CVE-2004-0488

Stack-based buffer overflow in the sslutiluuencodebinary function in sslutil.c for Apache modssl, when modssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN...