1436 matches found
CVE-2005-4429
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...
CVE-2005-4429
CVE-2005-4429 describes a SQL injection vulnerability in CS-Cart 1.3.0. The flaw resides in index.php where the parameters sort_by and sort_order can be exploited by remote attackers to execute arbitrary SQL commands. Documents indicate this affects CS-Cart 1.3.0 and allow arbitrary SQL execution...
CVE-2005-4429
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...
CVE-2005-4429: Undefined Security Weakness
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the 1 sortby and 2 sortorder parameters to index.php...
CS-Cart SQL inj. vuln.
CS-Cart SQL inj. vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html Vendor:www.cs-cart.com affected version: Latest. Product description: CS-Cart is a turnkey solution that includes all of the necessary features and...
CVE-2005-0151: Undefined Security Weakness
Unknown vulnerability in the installation of Adobe License Management Service, as used in Adobe Photoshop CS, Adobe Creative Suite 1.0, and Adobe Premiere Pro 1.5, allows attackers to gain administrator privileges...
Valve CS source format string bug
Format string bug in name command...
CVE-2002-0917
CVE-2002-0917 affects CGIScript.net csPassword.cgi, which stores .htpasswd files under the web document root. This allows remote authenticated users to download the password file and crack other users’ passwords. The vulnerability is mapped to a high severity (CVSS v2 base score 7.5, vector AV:N/...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030
CS&T CorporateTime for the Web is vulnerable to user enumeration: it returns different error messages for invalid usernames vs invalid passwords, allowing remote attackers to determine valid usernames on the server. Root cause is inconsistent authentication error handling; impact is partial confi...
CVE-2000-1030
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
CVE-2000-1030: Undefined Security Weakness
CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server...
bordermanager-dos.txt
The issue also affects BorderManager 3.0 sp2 running on NetWare 4.11 sp6a. I was able to replicate the memory allocation error but have not had any luck with obtaining the high CPU utilisation. Again, csatpxy.nlm is loaded by default on this system and unloading it stopped the memory allocation...
Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service
Novell BorderManager 3.03.5 Audit Trail Proxy - Denial of Service source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and extern...
Novell BorderManager 3.0/3.5 Audit Trail Proxy - Denial of Service
source: https://www.securityfocus.com/bid/976/info A feature called the CS Audit Trail Proxy is installed by default with BorederManager 3.0 and 3.5 .This feature opens a listening port at port 2000, on both the internal and external interfaces. If a connection is made to this port and the 'enter...
