7731 matches found
CVE-2005-4216
The Administration Service FMSAdmin.exe in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service application crash via a malformed request with a single character to port 1111...
CVE-2005-4216
The Administration Service FMSAdmin.exe in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service application crash via a malformed request with a single character to port 1111...
CVE-2005-4216
The vulnerability CVE-2005-4216 affects Macromedia Flash Media Server 2.0 r1145, specifically the Administration Service (FMSAdmin.exe). It allows remote attackers to trigger a denial-of-service (application crash) by sending a malformed request (one character) to TCP port 1111. The issue is caus...
CVE-2005-4174
eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing 1 install.php or 2 upgrade.php. NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration...
CVE-2005-4142
CVE-2005-4142 affects Lyris ListManager 5.0–8.8b. The vulnerability lies in the web-based subscription form where the pw parameter can be crafted to inject arbitrary list-administration commands via LFCR sequences, exploiting insufficient input sanitization. This can allow an unauthenticated atta...
CVE-2005-4142
The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR %0A%0D sequences in the pw parameter. NOTE: it is not clear whether this is a variant of a...
A-FAQ SQL inj. vuln.
A-FAQ SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/faq-sql-inj-vuln.html vendor:http://www.alanward.net/afaq affected version:1.0 and prior Product Description: A-FAQ is an ASP application used for managing a database of questions...
VERITAS NetBackup Java Administration Console format string vulnerability
Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...
VERITAS NetBackup Java Administration Console format string vulnerability
Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...
VERITAS NetBackup Java Administration Console format string vulnerability
Added: 11/30/2005 CVE: CVE-2005-2715 BID: 15079 OSVDB: 19949 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The bpjava-msvc component of the Java Administration Console in Veritas NetBackup 4.5 through 6.0 is affected by a format string vulnerabilit...
CVE-2005-3860
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remote attackers to execute arbitrary PHP code via a URL in the athenadir parameter...
CVE-2005-3860
The CVE-2005-3860 entry describes a PHP remote file inclusion vulnerability in Oliver May Athena PHP Website Administration 0.1a, exploitable via a URL in the athena_dir parameter to execute arbitrary PHP code. Connected sources confirm the affected product/variant and the root cause (RFI in athe...
CVE-2004-2606
The CVE-2004-2606 entry affects Linksys WRT54G (2.02.7) and BEFSR41 (v3). With firewall disabled, the web management interface allows remote login attempts to an admin page even when remote administration is configured as disabled. Connected sources (CVE/CVE-list/NVD) confirm the affected devices...
[SA17693] vtiger CRM Multiple Vulnerabilities
TITLE: vtiger CRM Multiple Vulnerabilities SECUNIA ADVISORY ID: SA17693 VERIFY ADVISORY: http://secunia.com/advisories/17693/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data, Exposure of sensitive information, System access WHERE: From remote SOFTWARE...
The use of site MIS-configuration to gain full control-vulnerability warning-the black bar safety net
In fact,now the online safety site and learn Black the site too much, 斡 Guoblowing na? bralso more and more,these contributed to the many sites and individuals, enhance safety awareness,is a good thing. So such as ipc$weak passwords,printer,IDQ remote overflow,UNICODE,3389 input and other...
CVE-2005-3697
Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...
CVE-2005-3697
Unspecified vulnerability in the administration interface in Uresk Links 2.0 Lite allows remote attackers to bypass authentication via unspecified vectors in index.php...
CVE-2002-2159
The CVE affects Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with firmware 1.42.7, where installing this upgrade opens TCP port 5678 for remote administration even when Block WAN and Remote Admin are disabled. This creates a potential for remote access by attackers. Publicly availabl...
CVE-2002-2201
CVE-2002-2201 affects Webmin ≤ 0.990, where the Printer Administration module allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the printer name. This is a remote, unauthenticated issue with high impact (arbitrary code execution) as described in multiple s...