CVE-2020-12685

XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript...

EUVD-2004-0374

Malware in sbrugna...

EUVD-2008-2418

Malware in sbrugna...

EUVD-2007-2628

Malware in sbrugna...

EUVD-2005-3073

Malware in sbrugna...

EUVD-2002-0866

Malware in sbrugna...

Code injection

Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service possibly server hang via crafted HTTP requests...

Debian DSA-471-1 : interchange - missing input sanitising

A vulnerability was discovered recently in Interchange, an e-commerce and general HTTP database display system. This vulnerability can be exploited by an attacker to expose the content of arbitrary variables. An attacker may learn SQL access information for your Interchange application and use th...

CVE-2004-0374

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "SQLUSER" string...

CVE-2004-0374

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "SQLUSER" string...

[SECURITY] [DSA 471-1] New interchange packages fix information leak

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 471-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 471-1] New interchange packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 471-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 471-1] New interchange packages fix information leak

-------------------------------------------------------------------------- Debian Security Advisory DSA 471-1 [email protected] http://www.debian.org/security/ Martin Schulze April 2nd, 2004 http://www.debian.org/security/faq -...

DSA-471 interchange - missing input sanitising

Bulletin has no description...

Interchange 4.8.x5.0 - Remote Information Disclosure

Interchange 4.8.x5.0 - Remote Information Disclosure source: https://www.securityfocus.com/bid/10005/info It has been reported that Interchange may be prone to a remote information disclosure vulnerability allowing attackers to disclose contents of arbitrary variables via URI requests. This issue...

CVE-2002-0874

Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files...

[SECURITY] [DSA 150-1] New interchange packages fix illegal file exposition

-------------------------------------------------------------------------- Debian Security Advisory DSA 150-1 [email protected] http://www.debian.org/security/ Martin Schulze August 13th, 2002 - -------------------------------------------------------------------------- Package : interchange...

RedHat Interchange 4.8.x - Arbitrary File Read

RedHat Interchange 4.8.x - Arbitrary File Read source: https://www.securityfocus.com/bid/5453/info A vulnerability has been reported for Interchange 4.8.5 and earlier. Reportedly, Interchange may disclose contents of files to attackers. The vulnerability occurs due to the placement of the 'doc'...

RedHat Interchange 4.8.x - Arbitrary File Read

source: https://www.securityfocus.com/bid/5453/info A vulnerability has been reported for Interchange 4.8.5 and earlier. Reportedly, Interchange may disclose contents of files to attackers. The vulnerability occurs due to the placement of the 'doc' folder. Reportedly, the folder will be installed...

Infinite InterChange DoS

Strumpf Noir Society Advisories ! Public release ! -- -= Infinite InterChange DoS =- Release date: Thursday, 21 December, 2000 Introduction: Infinite InterChange is a Win95/98/NT/2k mailserver for organizations that need to expand their network messaging. Infinite InterChange has many functions,...