3705 matches found
CVE-2005-2074
CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...
PT-2005-3016 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...
CVE-2005-2067
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2004-2040
Multiple cross-site scripting XSS vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the 1 LAN407 parameter to clockmenu.php, 2 "email article to a friend" field, 3 "submit news" field, or 4 avmsg parameter to usersettings.php...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
INN < 2.2.2 Crafted Article Handling Remote Overflow
The remote host is running INN InterNetNews. The remote version of this server does not do proper bounds checking. An attacker may exploit this issue to crash the remote service by overflowing some of the buffers by sending a maliciously formatted news article. C Tenable Network Security, Inc...
RHEL 2.1 : pan (RHSA-2003:312)
Updated Pan packages that close a denial of service vulnerability are now available. Pan is a Gnome/GTK+ newsreader. A bug in Pan versions prior to 0.13.4 can cause Pan to crash when parsing an article header containing a very long author email address. This bug causes a denial of service crash,...
Pan DoS
DoS on reading article with oversized header...
Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection
source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...
CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...
CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...
2026-01 .NET 9.0.12 Update for x64 Client (KB5074753)
2026-01 .NET 9.0.12 Update for x64 Client KB5074753...
Update Rollup 9 for Exchange Server 2010 Service Pack 3 (KB3030085)
Update Rollup 9 for Exchange Server 2010 Service Pack 3 KB3030085...
Recommended Update for Windows XP (818043)
Recommended Update for Windows XP 818043...
Q327405: Recommended Update, Italian Version (Windows XP Professional)
Q327405: Recommended Update, Italian Version Windows XP Professional...
Update for Microsoft Project 2013 (KB4462136) 64-Bit Edition
Update for Microsoft Project 2013 KB4462136 64-Bit Edition...
2020-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 for x64 (KB4570723)
2020-08 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows Server, version 1909 for x64 KB4570723...
Update for Windows 7 (KB2830477)
Update for Windows 7 KB2830477...