2563 matches found
Sawmill < 7.1.6 Multiple Vulnerabilities
Binary data 2947.prm...
CVE-2004-1603: Improper Link Resolution Before File Access
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to 1 read arbitrary files via the backup feature or 2 chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled...
CVE-2004-1604: Undefined Security Weakness
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the private directory, which is created when Front Page extensions are enabled...
cPanel Front Page Extension Installation Information Disclosure
Binary data 2391.prm...
cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure
cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure source: https://www.securityfocus.com/bid/11456/info It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions. This vulnerability reportedly allo...
PT-2004-2511 · Cpanel · Cpanel
Name of the Vulnerable Software and Affected Versions: cPanel version 9.4.1-RELEASE-64 Description: The issue allows local users to read arbitrary files via the backup feature or chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled. This is due to the...
cPanel 9.9.1 -R3 Front Page Extension - Installation Information Disclosure
source: https://www.securityfocus.com/bid/11456/info It is reported that cPanel is susceptible to an information disclosure vulnerability in its function to enable Front Page extensions. This vulnerability reportedly allows attackers to gain access to the contents of arbitrary, potentially...
Microsoft Exchange 2003 OWA NTLM wrong mailbox access
If NTLM authentication is used with front-end server it possible random access to wrong mailbox...
ZH2003-28SA (security advisory): file inclusion vulnerability in PayPal Store Front
ZH2003-28SA security advisory: file inclusion vulnerability in PayPal Store Front Published: 08 October 2003 Name: PayPal Store Front Affected Versions: 3.0 and other versions? Vendor: http://www.muziqpakistan.net/taz/ Issue: file inclusion vulnerability Author: Astharot at Zone-H.org Description...
PayPal Store Front 3.0 - index.php Remote File Inclusion
PayPal Store Front 3.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/8791/info PayPal Store Front is prone to a remote file include vulnerability. It may be possible for a remote attacker to influence the include path for an external page to point to an...
PayPal Store Front 3.0 - 'index.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/8791/info PayPal Store Front is prone to a remote file include vulnerability. It may be possible for a remote attacker to influence the include path for an external page to point to an attacker-specified location. This could be exploited to include a remo...
CVE-2003-0769
Cross-site scripting XSS vulnerability in the ICQ Web Front guestbook guestbook.html allows remote attackers to insert arbitrary web script and HTML via the message field...
CVE-2003-0769
Cross-site scripting XSS vulnerability in the ICQ Web Front guestbook guestbook.html allows remote attackers to insert arbitrary web script and HTML via the message field...
CVE-2003-0769
CVE-2003-0769 describes a cross-site scripting (XSS) flaw in ICQ Web Front guestbook (guestbook.html) where an attacker can inject arbitrary script via the message field. The vulnerability arises in the guestbook component, enabling potentially arbitrary HTML/script execution by remote attackers....
CVE-2003-0769: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the ICQ Web Front guestbook guestbook.html allows remote attackers to insert arbitrary web script and HTML via the message field...
CVE-2002-0072
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server IIS 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service crash when the URL parser accesses a nu...
CVE-2002-0072
CVE-2002-0072 describes a denial-of-service in Microsoft IIS 4.0/5.0/5.1 caused by the w3svc.dll FP2002/ISAPI filter when handling an overly long URL. The error handling rewrites a URL to a null value and then dereferences it, crashing Inetinfo.exe. Affected components: FP2002 Front Page Server E...
CVE-2002-0072: Undefined Security Weakness
The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server IIS 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service crash when the URL parser accesses a nu...
Microsoft IIS Multiple Remote DoS (MS02-018 / Q319733)
There's a denial of service vulnerability on the remote host in the Front Page ISAPI filter. An attacker may use this flaw to prevent the remote service from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Thanks to: SPIKE v2.1 : MS02-018 supercedes : MS01-043, MS01-025,...