47 matches found
ScareCrow 2.13 post.cgi forum Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
ScareCrow 2.13 forum.cgi forum Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
ScareCrow 2.13 profile.cgi user Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15915/info ScareCrow is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
PT-2008-6188 · Unknown · Printfilters-Ppd
Name of the Vulnerable Software and Affected Versions: printfilters-ppd version 2.13 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. The vendor disputes this issue, stating that the package does not have the...
TelCondex Simple Webserver Buffer Overflow
The TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. OpenVAS Vulnerability Test $Id: telcondex.nasl 6063 2017-05-03 09:03:05Z teissa $ Description: TelCondex Simple Webserver Buffer Overflow...
CVE-2004-1530
SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the 1 eid or 2 cid parameters...
International TeleCommunications WebBBS 2.13 - login & Password Buffer Overflow
// source: https://www.securityfocus.com/bid/803/info Certain versions of WebBBS by Mike Bryeans of International TeleCommunications contain a flaw in the initial login program. User supplied data via the login name and password are not bounds checked and can result in a buffer overflow. This lea...