CVE-2003-0622

The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service hang via pathname arguments that contain MS-DOS device names such as CON and AUX...

CVE-2003-0623

CVE-2003-0623 describes a cross-site scripting (XSS) vulnerability in the BEA Tuxedo Administration Console (versions 8.1 and earlier). The flaw allows remote attackers to inject arbitrary web script via the INIFILE parameter. The connected documents confirm the affected component and the exploit...

CVE-2003-0621

CVE-2003-0621 affects the BEA Tuxedo Administration Console (8.1 and earlier). The vulnerability arises from the INIFILE argument, where modified paths can cause directory traversal to reveal files outside the web root. Impact is information disclosure; the description does not confirm exploit de...

SHOUTcast Server buffer overflow

buffer overflow on long User-Agent HTTP header in admin.cgi and in processing of internal administration protocol...

PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting

PSCS VPOP3 2.0 Email Server WebAdmin - Cross-Site Scripting source: https://www.securityfocus.com/bid/8869/info It has been reported that PSCS VPOP3 Email Server may be prone to a cross-site scripting vulnerability that may allow a remote attacker to embed malicious HTML and script code in a link...

linksysDoS.txt

DigitalPranksters Security Advisory http://www.DigitalPranksters.com LinkSys EtherFast Router Denial of Service Attack Risk: Low Product: Linksys EtherFast Cable/DSL Firewall Router BEFSX41 Firmware 1.44.3 Product URL: http://www.linksys.com/products/product.asp?prid=433 Vendor Contacted: Septemb...

Unauthorized FTGate access

It's possible to access administration interface without authentication...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0426

The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the administrator password and gain privileges before the real administrator...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0676

CVE-2003-0676 : A directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (Sun ONE) allows remote attackers to read arbitrary files via partially encoded dot-dot sequences ("..%2f"). The information available confirms the affected component and the underlying issue is a...

Directory Traversal in Sun iPlanet Administration Server 5.1

Text of original posting to Sun: Originator: EDS Information Assurance Group - Jim Hardisty, Mark Brewis Date of Contact: 22nd April 2003 Issue:During a recent Penetration Test, a member of the team, Jim Hardisty, identified an issue with an installation of iPlanet Administration Express. It is...

iPlanet Administration Server directory traversal

Directory traversal during log view with 2f...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

D-Link DI-704P - Long URL Denial of Service

D-Link DI-704P - Long URL Denial of Service source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave ...

MS IIS web administration multiple bugs

Crossite scripting, unauthorized access to few configuration pages...

ProductCart 1.51.62.0 - login.asp SQL Injection

ProductCart 1.51.62.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other...

ProductCart 1.5/1.6/2.0 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/8105/info ProductCart has been reported prone to an SQL injection vulnerability that may be exploited to bypass the ProductCart authentication system and access the ProductCart administration panel; other attacks may also be possible...

phpBB 2.0.4 - PHP Remote File Inclusion

phpBB 2.0.4 - PHP Remote File Inclusion // / phpBB 2.0.4 Remote AdminStyles.PHP ThemeInfo.CFG File Include / / / / Exploit made on June 2003 by Spoofed Existence / / / / Patch : http://www.phpbb.com/phpBB/viewtopic.php?t=113826 / // include include include include include int main //The socket...

CVE-2003-0377

SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP...