1386 matches found
CVE-2002-0187: Undefined Security Weakness
Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."...
CVE-2001-0089
CVE-2001-0089 affects Internet Explorer 5.0–5.5. The vulnerability allows a remote attacker to read arbitrary files from the client through an HTML form using an INPUT TYPE element, known as the “File Upload via Form” issue. The provided documents do not specify payloads, affected configurations ...
CVE-2000-0950
CVE-2000-0950 affects the x-gw component of the TIS Firewall Toolkit (FWTK). The root cause is a format string vulnerability in x-gw that allows local users to execute arbitrary commands via a malformed display name. Impact as described: complete confidentiality, integrity, and availability could...
PT-1997-1041 · Washington University · Wu-Ftpd
Name of the Vulnerable Software and Affected Versions: wu-ftp affected versions not specified Description: The issue allows files to be overwritten via the rnfr command. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-1995-1016 · X.Org · X Windows
Name of the Vulnerable Software and Affected Versions: X Windows affected versions not specified Description: The issue allows remote attackers to execute commands due to guessable magic cookies. This can be exploited through xterm. Recommendations: At the moment, there is no information about a...
