RemotelyAnywhere Default.HTML Logout Message Injection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/9202/info RemotelyAnywhere has been reported prone to a logout message injection weakness. It has been reported that this issue presents itself due to a lack of sufficient restrictions performed by RemotelyAnywhere on use...

CVE-2012-5299

The CVE-2012-5299 entry concerns Mavili Guestbook (released Nov 2007). The vulnerability allows remote attackers to edit, delete, and approve arbitrary messages by sending direct requests to the endpoints edit.asp, delete.asp, or approve.asp. The provided documents do not specify affected version...

CVE-2012-2354

Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/site:readallmessages capability requirement and read arbitrary messages by using the "Recent conversations" feature with a modified parameter in a URL...

PHPList Security Bypass and Information Disclosure Vulnerabilities

PHPList is prone to a security bypass vulnerability and an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

PHPList Security Bypass and Information Disclosure Vulnerabilities

PHPList is prone to a security-bypass vulnerability and an information- disclosure vulnerability. An attacker can exploit these issues to gain access to sensitive information and send arbitrary messages to registered users. Other attacks are also possible. OpenVAS Vulnerability Test $Id:...

Multiple Symantec Intel Alert Management System Arbitrary Message Creation or Denial of Service

SUMMARY Symantec was notified of a improper message handling procedures in the Intel Alert Management System AMS2 that can be used to send arbitrary messages or kill the Intel Alert Handler service. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec AntiVirus Corporate Edition...

SOL5534 - Apache mod_proxy message format vulnerability - CAN-2004-0700

Vulnerability description Format string vulnerability in the modproxy hook functions function in sslenginelog.c in modssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled...

USN-345-1: mailman vulnerabilities

Steve Alexander discovered that mailman did not properly handle attachments with special filenames. A remote user could exploit that to stop mail delivery until the server administrator manually cleaned these posts. CVE-2006-2941 Various cross-site scripting vulnerabilities have been reported by...

CVE-2002-1880

LokwaBB 1.2.2 contains a vulnerability where remote attackers can read arbitrary messages by modifying the pmid parameter in pm.php. The affected component is the web application logic handling pmid values; concrete root cause is improper handling/validation of the pmid input that leads to unauth...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2002-1730

ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true"...

CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

PBLang Bulletin Board System 4.x - DelPM.php Arbitrary Personal Message Deletion

PBLang Bulletin Board System 4.x - DelPM.php Arbitrary Personal Message Deletion source: https://www.securityfocus.com/bid/12694/info PBLang is reported prone to a vulnerability that can allow a registered user to delete arbitrary personal messages. The vulnerability exists due to a design error...