1774 matches found
Microsoft SQL Server 7.0 - Remote Denial of Service (2)
// source: https://www.securityfocus.com/bid/11265/info Reportedly Microsoft SQL Server is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle irregular network communications. An attacker may leverage this issue to cause the affected...
BBS E-Market Professional index.php filename Parameter Traversal Arbitrary File Access
The remote host is running BBS E-Market Professional, a Korean e-commerce application written in PHP.\n There is a directory traversal vulnerability in the 'filename' parameter of '/bemarket/shop/index.php'. A remote attacker could exploit this to read sensitive information on the system...
OpenCA crypto-utils.lib libCheckSignature Function Signature Validation Weakness
The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and incluing 0.9.1.6 contains a flaw that may lead an attacker to bypass signature verification of a certificate. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Web Animations Password Protect - Multiple Input Validation Vulnerabilities
Web Animations Password Protect - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/11073/info Password Protect is reported prone to a multiple cross-site scripting and SQL injection vulnerabilities. These issues occur due to insufficient sanitization of...
[Full-Disclosure] iDEFENSE Security Advisory 08.25.04: Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability
Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 08.25.04 http://www.idefense.com/application/poi/display?type=vulnerabilities August 25, 2004 I. BACKGROUND Ipswitch WhatsUp Gold is a Microsoft Windows based network monitoring application. More information is...
WebMatic Unspecified Login Function Access Vulnerability
The remote host is running WebMatic, a web-based application designed to generate websites. The vendor has released WebMatic 1.9 to address an unknown flaw in earlier versions of the software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
WebAPP < 0.9.9.2 index.cgi Directory Traversal Arbitrary File Access
Binary data 2146.prm...
PostNuke Reviews Module title Parameter XSS
The remote host is running a version of PostNuke that contains the 'Reviews' module, which itself is vulnerable to a cross-site scripting issue. An attacker may use this flaw to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection
Internet Software Sciences Web+Center 4.0.1 - Cookie Object SQL Injection source: https://www.securityfocus.com/bid/10771/info An SQL injection vulnerability is identified in the application that may allow attackers to pass malicious input to database queries, resulting in the modification of que...
Mensajeitor Tag Board 1.x - Authentication Bypass
source: https://www.securityfocus.com/bid/10774/info It has been reported that Mensajeitor Tag Board is affected by an authentication bypass vulnerability. This issue is due to a failure of the application to properly handle authentication controls. Successful exploitation of this issue will allo...
Horde Chora CVS Viewer diff Utility Arbitrary Command Execution
The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. %NASLMINLEVEL 70300 This script was written by George A. Theall, . See the...
DoS in MiniShare 1.3.2
Donato Ferrante Application: MiniShare http://minishare.sourceforge.net/ Version: 1.3.2 Bug: Denial Of Service Date: 26-May-2004 Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 1...
MiniShare 1.3.2 - Remote Denial of Service
source: https://www.securityfocus.com/bid/10417/info Minishare is affected by a remote denial of service vulnerability. This issue is due to a failure of the application to handle improperly formed HTTP requests. This issue will allow an attacker to cause the affected computer to stop responding,...
NotJustBrowsing 1.0.3 Local Password Disclosure Exploit
Exploit for unknown platform in category local exploits ======================================================= NotJustBrowsing 1.0.3 Local Password Disclosure Exploit ======================================================= / NotJustBrowsing 1.0.3 Local Password Disclosure Exploit by Kozan...
NewsTraXor Website Management Script 2.9 Beta - Database Disclosure
source: https://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This issue may allow a remote attacker to gain unauthorized administrati...
Belchior Foundry VCard 2.8 - Authentication Bypass
source: https://www.securityfocus.com/bid/9910/info It has been reported that vCard is prone to a remote authentication bypass vulnerability. This issue is due to a design error that would allow a malicious user access to certain admin functionality without having to first authenticate to the...
CVE-2004-0086
Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085...
Fool's Workshop Owl's Workshop 1.0 - 'glossary.php' Arbitrary File Access
source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...
ACLogic CesarFTP 0.99 - Remote Resource Exhaustion (Denial of Service)
ACLogic CesarFTP 0.99 - Remote Resource Exhaustion Denial of Service source: https://www.securityfocus.com/bid/9666/info It has been reported that CesarFTP is prone to a remote resource exhaustion vulnerability. This issue is due to the application failing to properly validate user input...
