6173 matches found
WebWasher CSM 4.4.1 Build 752 Conf Script - Cross-Site Scripting
source: https://www.securityfocus.com/bid/13037/info It is reported that the WebWasher 'conf' script is prone to a cross-site scripting vulnerability. A remote attacker may exploit this issue to have arbitrary script and HTML code executed in the browser of a target user. Code execution would occ...
Yahoo! Messenger < 6.0.0.1921 Multiple DoS
Binary data 2681.prm...
PT-2005-1651 · Phpbb · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB versions 2.0.12 and earlier Description: The issue allows remote attackers to obtain sensitive information via a highlight parameter containing invalid regular expression syntax in the "viewtopic.php" API endpoint. This reveals the path...
CVE-2004-1662
YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message...
[UNIX] JShop Cross Site Scripting
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Immunity Canvas: NSS
Name| nss ---|--- CVE| CVE-2004-0826 Exploit Pack| CANVAS Description| NSS overflow Notes| CVE Name: CVE-2004-0826 VENDOR: Mozilla References: http://www.osvdb.org/displayvuln.php?osvdbid=9116 CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0826 Date public: 23 of August, 2004...
abctab2ps 1.6.3 - 'Trim_Title' '.ABC' File Remote Buffer Overflow
source: https://www.securityfocus.com/bid/12028/info abctab2ps is reported prone to a remote buffer overflow vulnerability. This issue arises because the application fails to carry out proper boundary checks before copying user-supplied data in to sensitive process buffers. It is reported that th...
[EXPL] Foxmail FROM Field Buffer Overflow
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
[UNIX] KPhone STUN DoS (Malformed STUN Packets)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Ethereal - EIGRP Dissector TLV_IP_INT Long IP Remote Denial of Service
Ethereal - EIGRP Dissector TLVIPINT Long IP Remote Denial of Service / Ethereal network protocol analyzer EIGRP Dissector TLVIPINT Long IP Address Overflow vulnerability proof of concept code version 1.0 Mar 26 2004 by Rmi Denis-Courmont www simphalempin com dev This vulnerability was found by:...
CVE-2004-0011
Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code...
CVE-2003-1379
clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters 1 A, which reveals the date and time, 2 F, 3 M, which reveals 'ifconfig' information, 4 P, which lists the processes, 5 Y, which reveals the snort log files, or 6 b,...
iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure
iSoft-Solutions QuikStore Shopping Cart 2.12 - store Full Path Disclosure source: https://www.securityfocus.com/bid/9282/info It has been reported that QuikStore Shopping Cart may be prone to an information disclosure vulnerability due to insufficient sanitization of user-supplied data through th...
iSoft-Solutions QuikStore Shopping Cart 2.12 - 'template' Directory Traversal
source: https://www.securityfocus.com/bid/9283/info It has been reported that QuikStore Shopping Cart may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '../' character sequences. The issue exists due to insufficie...
Tcpdump 3.x - L2TP Parser Remote Denial of Service
Tcpdump 3.x - L2TP Parser Remote Denial of Service source: https://www.securityfocus.com/bid/9263/info A vulnerability has been reported to exist in the software that may allow a remote attacker to cause a denial of service condition in tcpdump. The issue presents itself when an attacker sends a...
Получение доступа к панели администрирования в Willwin's Web Voting v.1.0
Получение доступа к панели администрирования в Willwin's Web Voting v.1.0 Название скрипта: Willwin's Web Voting Уязвимая версия: v.1.0 Сайт производителя: http://willwin.plex.ru Автор: [email protected] Дата: 13th December 2003 Пароль для получения доступа к панели управления голосованием в...
Koch Roland Rolis Guestbook 1.0 - $path Remote File Inclusion
Koch Roland Rolis Guestbook 1.0 - $path Remote File Inclusion source: https://www.securityfocus.com/bid/9054/info It has been reported that Rolis Guestbook may be vulnerable to an input validation issue that may allow an attacker to include malicious files containing arbitrary code to be executed...
ShoutCast server 1.9.2/win32
Informations : °°°°°°°°°°°° Language : Microsoft Visual C++ v5.0/v6.0 MFC Bugged Version : ShoutCast server 1.9.2/win32 and less ? Patched version : none Website : http://www.shoutcast.com Problems : DoS if we know the password from the server Objects : °°°°°°° - scserv.exe vulnerable variable:...
iPlanet Web Server Enterprise Edition URL-encoded Host: Information Disclosure
According to its self reported version number, the remote iPlanet web server is affected by an information disclosure vulnerability wherein a remote user can retrieve sensitive data from memory allocation pools or cause a denial of service against the server. Since Nessus solely relied on the...
TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6
TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6 contributed by: rushjo ========================================================================= Tripbit Security Advisory TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6...