CVE-2002-1361: Undefined Security Weakness

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...

Snitz Forums < 3.4.03 register.asp Email Parameter SQL Injection (deprecated)

Binary data 1530.prm...

Snitz Forums 2000 < 3.4.03 register.asp Email Parameter SQL Injection

The remote host is using Snitz Forum 2000. This version allows an attacker to execute stored procedures and non-interactive operating system commands on the system. The problem stems from the fact that the 'Email' variable in the register.asp module fails to properly validate and strip out...

PT-2003-2139 · Phpkit · Phpkit

Name of the Vulnerable Software and Affected Versions: PHPKIT versions 1.6.02 through 1.6.03 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the contact email parameter in the include.php file. Recommendations: For PHPKIT versions...

CVE-2003-0751

SQL injection vulnerability in passdone.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter...

CVE-2003-0751: Undefined Security Weakness

SQL injection vulnerability in passdone.php for PY-Membres 4.2 and earlier allows remote attackers to execute arbitrary SQL queries via the email parameter...

Snitz Forums 2000 register.asp Email Parameter SQL Injection

The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2003-0038

Removed by vendor...

PT-2003-1325

Name of the Vulnerable Software and Affected Versions Mailman version 2.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject script or HTML into web pages via the email or language parameters. Recommendations For Mailman version 2.1, update the options.py fil...

CVE-2002-1950

Cross-site scripting XSS vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the 1 the email parameter of add.php or 2 the banner URL banurl parameter in the main list...

CVE-2002-2193

Cross-site scripting XSS vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter...

CVE-2002-1799

Cross-site scripting XSS vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the 1 email parameter to add.php or 2 banurl parameter...

CVE-2002-0948: Undefined Security Weakness

Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes SSI as the web server, via the 1 Name or 2 Email parameters, which are not properly filtered...

CVE-2002-0436

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

CVE-2001-0844

Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...

CVE-2001-0844

Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...

CVE-2001-0844

CVE-2001-0844 describes a vulnerability in two components, the Book of guests and Post it!, where remote attackers can execute arbitrary code by supplying shell metacharacters in the email parameter. The NVD entry cites a CVSS v2 base score of 7.5 (HIGH) with NETWORK attack vector, low complexity...

CVE-2001-0844: Undefined Security Weakness

Vulnerability in 1 Book of guests and 2 Post it! allows remote attackers to execute arbitrary code via shell metacharacters in the email parameter...

CVE-2001-0180

Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter...

CVE-2001-0180: Undefined Security Weakness

Lars Ellingsen guestserver.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the "email" parameter...