2171 matches found
Vulnerability in YaBB forum (Perl version without SQL)
There's a vulnerability in non-SQL version of YaBB forum I've checked it with YaBB 1 Gold - SP 1.2 written in Perl -- it's not new, but is in use even nowadays. You can input almost anything into .txt file from boards directory. The "subject" form field isn't checked for "n" symbols, so creating ...
CVE-2004-0182
Mailman before 2.0.13 allows remote attackers to cause a denial of service crash via an email message with an empty subject field...
CVE-2004-0182
Removed by vendor...
Important: Red Hat Security Advisory: mailman security update
An updated mailman package that closes a DoS vulnerability in mailman introduced by RHSA-2004:019 is now available. Mailman is a mailing list manager. On February 19 2004, Red Hat issued security erratum RHSA-2004:019 to correct a DoS Denial of Service vulnerability where an attacker could send a...
CVE-2003-0966
Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line...
CVE-2003-0236
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...
Phorum 3.4 - Email Subject Line Script Injection
source: https://www.securityfocus.com/bid/7262/info It has been reported that it is possible to inject script code into the subject of a message in Phorum. This may be done by constructing a malicious subject line or other fields before sending an email to the target victim. "alert"Vulnerable";...
PHP-Nuke block-Forums.php subject vulnerabilities
The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...
CVE-1999-1553
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line...
CVE-1999-1553
CVE-1999-1553 concerns XCmail 0.99.6 with autoquote enabled. The vulnerability is a buffer overflow triggered by a long subject line, allowing remote attackers to execute arbitrary commands. Documents explicitly state XCmail 0.99.6 and the autoquote feature as the context, with the overflow descr...