2311 matches found
CVE-2003-0236: Undefined Security Weakness
Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the 1 Subject or 2 Date headers...
Phorum 3.4 - Email Subject Line Script Injection
source: https://www.securityfocus.com/bid/7262/info It has been reported that it is possible to inject script code into the subject of a message in Phorum. This may be done by constructing a malicious subject line or other fields before sending an email to the target victim. "alert"Vulnerable";...
PHP-Nuke block-Forums.php subject vulnerabilities
The block-Forums.php file have a vuln if an attacker insert a malformatted subject to a topic of Splatt Forum. A type of subject is: "scriptalert'bug'";/script The 'alt' tag is closed by " and the other text is normal html. This bug is very bad if a subject is:...
CVE-2002-1459: Undefined Security Weakness
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...
CVE-2002-1043: Undefined Security Weakness
Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service crash via a malformed Subject "\t\t"...
CVE-2002-1044: Undefined Security Weakness
Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long Subject field...
CVE-2002-0411: Undefined Security Weakness
Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line...
CVE-1999-1553
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line...
CVE-1999-1553
CVE-1999-1553 concerns XCmail 0.99.6 with autoquote enabled. The vulnerability is a buffer overflow triggered by a long subject line, allowing remote attackers to execute arbitrary commands. Documents explicitly state XCmail 0.99.6 and the autoquote feature as the context, with the overflow descr...
CVE-1999-1553: Undefined Security Weakness
Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line...