CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...

PT-2005-3723 · Microsoft +1 · Windows +3

Name of the Vulnerable Software and Affected Versions: Rediff Bol version 7.0 Description: The issue allows remote attackers to read the Windows Address Book. This is achieved via the FullAddressBook method of the Fetch.FetchContact.1 ActiveX control, which is part of the Fetch.dll component...

Rediff Bol 7.0 ActiveX information leak

With FullAddressBook method of Fetch.FetchContact.1 ActiveX control it's possible to obtain whole Windows address book...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerab...

[Full-disclosure] Rediff Bol 7.0 WAB Contacts

Rediff Bol 7.0 WAB Contacts Affected Program : Rediff Bol 7.0 It is a popular instant messenger from Rediff.com Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability Description : Rediff Bol's ActiveX control Fetch.FetchContact.1 / Fetch.dll allows a...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script var Obj = new...

gurgens21.txt

Update: 1:02 AM 5/13/2005 Subject: " Gurgens Guest Book Password Database Vulnerability " Vulnerable version: Guest Book 2.1 Description: Guest Book is a complete solution which requires none or very little effort to set up and match existing website configuration. Control Panel with "Virtual...

IBM Lotus Domino HTML Hidden Field Encrypted Password Disclosure

The remote host is running a version of Lotus Domino Server that is prone to several information disclosure vulnerabilities. Specifically, users' password hashes and other data are included in hidden fields in the public address book 'names.nsf' readable by default by all users. Moreover, Domino...

fishcartSQLXSS.txt

------=NextPart001005A01C55049.DEF610F0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers,...

CVE-2002-1697

Electronic Code Book ECB mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same plaintext blocks, which could allow remote attackers to gain sensitive information...

CVE-2005-1647

Gurgens GASoft Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...

CVE-2005-1647

CVE-2005-1647 affects Gurgens (GASoft) Guest Book 2.1. The vulnerability arises because db/Genid.dat is stored under the web document root with insufficient access control, allowing remote attackers to obtain and decrypt usernames and passwords. Red Hat and CVE listings corroborate this issue. Th...

CVE-2005-1647

Gurgens GASoft Guest Book 2.1 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...

CVE-2004-1867

Cross-site scripting XSS vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field...

CVE-2004-1867

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2005-1282

Multiple cross-site scripting XSS vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote attackers to inject arbitrary web script or HTML via 1 the src parameter in an IMG tag, 2 User settings, or 3 Address book input boxes in the webmail interface...

CVE-2005-0284

SQL injection vulnerability in addentry.php in Woltlab Burning Book 1.0 Gold, 1.1.1e, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the user-agent parameter...

CVE-2005-0284

CVE-2005-0284 describes a SQL injection vulnerability in Woltlab Burning Book 1.0 Gold and 1.1.1e (and possibly other versions) where the addentry.php script mishandles the user-agent parameter, allowing remote attackers to execute arbitrary SQL commands. The provided sources state the affected c...