CVE-2004-0705

CVE-2004-0705 affects Bugzilla 2.16.x before 2.16.6 and Bugzilla 2.18 before 2.18rc1. The issue is multiple cross-site scripting (XSS) vulnerabilities in six CGI scripts (editcomponents.cgi, editgroups.cgi, editmilestones.cgi, editproducts.cgi, editusers.cgi, editversions.cgi) that allow remote a...

Choutcast buffer overflow

Buffer overflow on oversized icy-name and icy-url parameters...

mcNews 1.x - File Disclosure

source: https://www.securityfocus.com/bid/4770/info mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently filter dot-dot-slash ../ sequences from URL...

Hosting Controller 1.x - DSNManager Directory Traversal

Hosting Controller 1.x - DSNManager Directory Traversal source: https://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not...

PVote 1.01.5 - Poll Content Manipulation

PVote 1.01.5 - Poll Content Manipulation source: https://www.securityfocus.com/bid/4540/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible for a remote attacker to add/delete web polls just b...

CVE-1999-0758: Undefined Security Weakness

Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL...

CVE-2000-0850: Undefined Security Weakness

Netegrity SiteMinder before 4.11 allows remote attackers to bypass its authentication mechanism by appending "$/FILENAME.ext" where ext is .ccc, .class, or .jpg to the requested URL...

CVE-2000-1133: Undefined Security Weakness

Authentix Authentix100 allows remote attackers to bypass authentication by inserting a . dot into the URL for a protected directory...

Mirabilis ICQ 0.99/98.0 a/2000.0 A/99a - Remote Denial of Service

// source: https://www.securityfocus.com/bid/1463/info The guestbook CGI program in ICQ Web Front service for ICQ 2000a, 99b, and others allows remote attackers to cause a denial of service via a URL with a long name parameter. / ICQ Web Front DoS / include include include include void mainint...