4246 matches found
CVE-2005-2074
CVE-2005-2074 affects PHP-Fusion 6.0.105: a cross-site scripting (XSS) vulnerability in submit.php that can inject arbitrary HTML/Script via the news_body, article_description, or article_body parameters. Exploitation details are documented in connected sources; there is no explicit patched versi...
PT-2005-3016 · Php Fusion · Php-Fusion
Name of the Vulnerable Software and Affected Versions: PHP-Fusion version 6.0.105 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a news or article post. The vulnerability possibly involves the news body, article description, or...
CVE-2005-2067
SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter...
CVE-2004-2040
Multiple cross-site scripting XSS vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the 1 LAN407 parameter to clockmenu.php, 2 "email article to a friend" field, 3 "submit news" field, or 4 avmsg parameter to usersettings.php...
CVE-2005-1453
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service crash by closing the connection while fetchnews is reading 1 an article header or 2 an article body, which also prevents fetchnews from querying other servers...
INN < 2.2.2 Crafted Article Handling Remote Overflow
The remote host is running INN InterNetNews. The remote version of this server does not do proper bounds checking. An attacker may exploit this issue to crash the remote service by overflowing some of the buffers by sending a maliciously formatted news article. C Tenable Network Security, Inc...
RHEL 2.1 : pan (RHSA-2003:312)
Updated Pan packages that close a denial of service vulnerability are now available. Pan is a Gnome/GTK+ newsreader. A bug in Pan versions prior to 0.13.4 can cause Pan to crash when parsing an article header containing a very long author email address. This bug causes a denial of service crash,...
Pan DoS
DoS on reading article with oversized header...
Mambo Site Server 4.0.14 - 'emailarticle.php?id' SQL Injection
source: https://www.securityfocus.com/bid/8647/info It has been reported that Mambo Open Source Server is prone to multiple input validation vulnerabilities that may allow remote attackers to inject malicious SQL syntax into database queries and send anonymous e-mail to arbitrary users. The...
CVE-2002-1661
The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service infinite loop when leafnode requests a cross-posted article to one group whose name is a prefix of another group...
CVE-2000-0360
Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article...
Update for Microsoft Office 2013 (KB3114835) 64-Bit Edition
Update for Microsoft Office 2013 KB3114835 64-Bit Edition...
SQL Server 2017 RTM Cumulative Update (CU) 6 KB4101464
SQL Server 2017 RTM Cumulative Update CU 6 KB4101464...
2026-07 Cumulative Update for Windows 11, version 24H2 for arm64-based Systems (KB5121767) (26100.8894)
2026-07 Cumulative Update for Windows 11, version 24H2 for arm64-based Systems KB5121767 26100.8894...
2019-08 Preview of Monthly Quality Rollup for Windows Server 2012 for x64-based Systems (KB4512512)
2019-08 Preview of Monthly Quality Rollup for Windows Server 2012 for x64-based Systems KB4512512...
Update Rollup 9 for Exchange Server 2010 Service Pack 3 (KB3030085)
Update Rollup 9 for Exchange Server 2010 Service Pack 3 KB3030085...
Update for Windows Server 2003 for Itanium-based Systems (KB2927811)
Update for Windows Server 2003 for Itanium-based Systems KB2927811...
2021-08 Cumulative Update Preview for Windows Server, version 2004 for x64-based Systems (KB5005101)
2021-08 Cumulative Update Preview for Windows Server, version 2004 for x64-based Systems KB5005101...