EUVD-2003-1093

Malware in sbrugna...

EUVD-2003-1090

Malware in sbrugna...

EUVD-2003-1091

Malware in sbrugna...

EUVD-2003-1092

Malware in sbrugna...

CVE-2003-1100

Multiple cross-site scripting XSS vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors...

CVE-2003-1101

Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message...

CVE-2003-1102

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code...

CVE-2003-1103

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands...

CVE-2003-1103

The CVE-2003-1103 entry describes an SQL injection vulnerability in Hummingbird CyberDOCS (loginact.asp) prior to version 3.9, enabling remote execution of arbitrary SQL commands. Root cause: improper handling in loginact.asp leading to SQL injection. Impact per source: partial confidentiality, i...

CVE-2003-1101

CVE-2003-1101 affects Hummingbird CyberDOCS versions 3.5.1, 3.9, and 4.0. The vulnerability arises in the DM Web Server where invalid login credentials can cause an error message that reveals the full server path, enabling a remote attacker to learn the system layout. The available documents do n...

CVE-2003-1100

CVE-2003-1100 concerns multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS versions 3.5.1, 3.9, and 4.0. The underlying issue is improper handling of user-supplied input leading to injection of arbitrary web script or HTML via certain vectors. Impact is remote exploitatio...

CVE-2003-1102

Hummingbird CyberDOCS 3.5, 3.9, and 4.0, when running on IIS, uses insecure permissions for script source code files, which allows remote attackers to read the source code...

CVE-2003-1101

Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message...

CVE-2003-1100

Multiple cross-site scripting XSS vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors...

CVE-2003-1103

SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands...

Hummingbird CyberDOCS error page discloses web server installation path

Overview Hummingbird CyberDOCS contains a vulnerability that could allow a remote attacker to learn the installation path of the web server. This information could be used to support further attacks. Description Hummingbird CyberDOCS Hummingbird DM is a web-based enterprise document management...