CVE-2005-1022

CVE-2005-1022 affects ColdFusion 6.1 Updater 1, where Java .class files are placed under the web root in /WEB-INF/cfclasses. This configuration allows a remote attacker to obtain sensitive information exposed by those class files. The NVD entry documents a public impact of partial confidentiality...

CVE-2005-1067

Vulnerability in Accessuser Class before 1.75 allows local users to gain access as other users via the password "new"...

Macromedia Security Bulletin - ColdFusion MX 6.1

MPSB05-02 - Workaround available for ColdFusion MX 6.1 Updater file disclosure. Originally posted: April 7, 2005 http://www.macromedia.com/go/mpsb05-02 Summary: ColdFusion 6.1 Updater 1 in the ColdFusion MX for JRun4 configuration only creates a /WEB-INF/cfclasses directory under the web server...

CVE-2005-0888

Multiple cross-site scripting XSS vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 class or 2 method name...

CVE-2005-0747

ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, as demonstrated using the id parameter to ApplicantDecision.asp...

CVE-2005-0747

The CVE-2005-0747 entry describes an information disclosure in ApplyYourself i-Class where remote attackers can obtain sensitive information about their own applications by reusing a hidden ID field, demonstrated via the id parameter to ApplicantDecision.asp. The vulnerability stems from relying ...

chipmunk.forum.txt

/==========================================/ // GHC - Chipmunk forum - ADVISORY // Product: Chipmunk Forums // URL: http://www.chipmunk-scripts.com/board // VULNERABILITY CLASS: SQL injection // RISK: hight /==========================================/ exploit at login.php enter user name as...

MyPHP Forum 1.0 - SQL Injection

MyPHP Forum 1.0 - SQL Injection /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...

CVE-2004-2446

Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." dot dot sequences in unknown vectors...

coldfusionmx61.txt

Software: Macromedia ColdFusion MX 6.1 Description: There is a vulnerability in the ColdFusion MX 6.1 product. To exploit this, a user needs access to create a cold fusion template on a ColdFusion server with CreateObject or cfobject tags enabled. The code given below writes a java class to the...

CFMX vulnerability

Software: Macromedia ColdFusion MX 6.1 Description: There is a vulnerability in the ColdFusion MX 6.1 product. To exploit this, a user needs access to create a cold fusion template on a ColdFusion server with CreateObject or cfobject tags enabled. The code given below writes a java class to the...

CVE-2001-0643

Internet Explorer 5.5 does not display the Class ID CLSID when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type...

Windows Shell file type spoofing

By using class id in content-disposition it's possible ti spoof file type. Content-Disposition: attachment; filename=malware.3050f4d8-98B5- 11CF-BB82-00AA00BDCE0Bfunballgitespiethrow2Empeg"...

1st Class Mail Server 4.0 1 - advanced.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - advanced.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - Index Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

1st Class Mail Server 4.0 1 - Index Cross-Site Scripting

1st Class Mail Server 4.0 1 - Index Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server...

1st Class Mail Server 4.0 1 - members.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - members.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting

source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reported to be prone to these issues,...

1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - viewmail.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting

1st Class Mail Server 4.0 1 - list.tagz Cross-Site Scripting source: https://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail...