CVE-2005-4521

CVE-2005-4521 is a CRLF injection vulnerability in Mantis (affected: 1.0.0rc3 and earlier) that lets remote attackers modify HTTP headers and perform HTTP response splitting via the login_cookie_test.php return parameter and the login_select_proj_page.php ref parameter. The issue is documented in...

CVE-2005-4521

CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via 1 the return parameter in logincookietest.php and 2 ref parameter in loginselectprojpage.php...

[ GLSA 200512-12 ] Mantis: Multiple vulnerabilities

Gentoo Linux Security Advisory GLSA 200512-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

CVE-2005-4503

httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service crash via a long Server field in an HTTP response...

CVE-2005-4502

Cross-site scripting XSS vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user...

CVE-2005-4502

Cross-site scripting XSS vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to the user...

httprint 202.0 - HTTP Response Server Field Overflow Denial of Service

source: https://www.securityfocus.com/bid/16031/info httprint is prone to multiple remote vulnerabilities. The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser. The second issue may allow remote attackers to crash an instance of the application...

httprint 202.0 - HTTP Response Server Field Overflow Denial of Service

httprint 202.0 - HTTP Response Server Field Overflow Denial of Service source: https://www.securityfocus.com/bid/16031/info httprint is prone to multiple remote vulnerabilities. The first issue may allow remote attackers to execute arbitrary HTML and script code in a user's browser. The second...

CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution

The following advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSECSecurityAdvisoryAppScanQARemoteCodeExec.pdf CYBSEC S.A. www.cybsec.com Advisory Name: Watchfire AppScan QA Remote Code Execution ========== Vulnerability Class: Buffer Overflow =============...

SimpleBBS 1.1 - Remote Command Execution (C)

SimpleBBS 1.1 - Remote Command Execution C / SimpleBBS !--total 188 drwxrwxrwx 2 f1 f1 4096 Dec 6 17:02 . drwxr-xr-x 7 f1 f1 4096 Nov 17 2002 .. -rw-r--r-- 1 f1 f1 916 Oct 20 09:30 WSFTP.LOG -rwxrwxrwx 1 f1 f1 28 Nov 17 2002 categories.php -rwxrwxrwx 1 f1 f1 151 Dec 7 09:11 forums.php -rwxrwxrwx ...

GLSA-200511-18 : phpSysInfo: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200511-18 phpSysInfo: Multiple vulnerabilities Christopher Kunz from the Hardened-PHP Project discovered that phpSysInfo is vulnerable to local file inclusion, cross-site scripting and a HTTP Response Splitting attacks. Impact : A...

CVE-2005-3982

CRLF injection vulnerability in layerstoggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests...

CVE-2005-3982

CRLF injection vulnerability in layerstoggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests...

CVE-2005-3982

CVE-2005-3982 is a CRLF injection vulnerability in WebCalendar 1.0.1 (layers_toggle.php) that can allow remote attackers to modify HTTP headers and perform HTTP response splitting via the ret parameter used for redirects. Debian advisory DSA-1002-1 notes multiple issues in webcalendar and provide...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...

drupal -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in Drupal, which can be exploited by malicious people to bypass certain security restrictions, and conduct script insertion and HTTP response splitting attacks. 1 An input validation error in the filtering of HTML code can be exploited to...

WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting

WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...

WebCalendar 1.0.1 - 'Layers_Toggle.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web...

WebCalendar < 1.0.2 Multiple Vulnerabilities

Binary data 3303.prm...

CVE-2005-3791

The vulnerability CVE-2005-3791 affects PHPAdsNew and phpPgAds up to version 2.0.6. The root cause is an HTTP response splitting flaw in adclick.php (and possibly other vectors), allowing remote attackers to inject arbitrary HTML headers. Reported impact: confidentiality unaffected, integrity par...