CVE-2002-1436

Novell NetWare Web Server (Netscape/IPlanet) contains a Perl handler that will execute arbitrary code when a POST request is sent to the HTTP endpoint. Affected: NetWare 5.x (up to SP4) and 6.x (up to SP1). Root cause: the Perl handler (for Perl 5.003) processes HTTP POST data in a way that enabl...

CVE-2002-1252

The CVE-2002-1252 entry concerns the Application Messaging Gateway for PeopleTools 8.1x (used in PeopleSoft products). Affected component/attack surface involves XML External Entities (XXE) fields in an HTTP POST processed by the SimpleFileHandler, allowing remote attackers to read arbitrary file...

CVE-2004-0049

RealNetworks Helix Server/Proxy 9 and Helix Mobile Server 10 are affected by a buffer overflow in the Administration Interface over HTTP. An authenticated user can submit malformed HTTP POST requests to trigger code execution on the server. Affected versions include Helix Universal Server/Gateway...

CVE-2002-1252: Undefined Security Weakness

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities XXE fields in an HTTP POST request that is processed by the SimpleFileHandler handler...

CVE-2004-0049: Undefined Security Weakness

Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...

CVE-2002-1436: Undefined Security Weakness

The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request...

CVE-2004-0095: Undefined Security Weakness

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authenticatio...

Axis Network Camera 2.x And Video Server 1-3 - Directory Traversal

source: https://www.securityfocus.com/bid/11011/info A directory-traversal vulnerability in HTTP POST requests. This attack is demonstrated by an anonymous user calling protected administration scripts. This bypasses authentication checks and gives anonymous users remote adminitration of the...

Apache < 2.0.43 HTTP POST Request Source Disclosure

Binary data 1489.prm...

CVE-2004-0038

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

CVE-2004-0038: Undefined Security Weakness

McAfee ePolicy Orchestrator ePO 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81...

CVE-2004-0331

CVE-2004-0331 describes a heap-based buffer overflow in Dell OpenManage Web Server (omws32.exe) due to a boundary error when handling POST requests. Affected versions include 3.2.0–3.7.1 (per connected advisories and the MSF module), with exploitation possible via a remote HTTP POST containing an...

CVE-2004-0245

Web Crossing 4.x and 5.x are affected. The vulnerability allows remote attackers to cause a crash/denial of service by sending an HTTP POST with a large or negative Content-Length, triggering an integer divide-by-zero in the affected component. The available sources (NVD entry) describe the issue...

CVE-2004-0245

Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service crash by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero...

CVE-2004-0245: Undefined Security Weakness

Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service crash by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero...

CVE-2004-0331: Undefined Security Weakness

Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service crash via a HTTP POST with a long application variable...

CVE-2004-0095

McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service memory consumption and crash and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow...

CVE-2004-0049

Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port...

CVE-2004-2086

Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP POST request with a long query parameter...