CVE-2002-1027

Cross-site scripting vulnerability in the default HTTP 500 error script 500error.jsp for Macromedia Sitespring 1.2.0 277.1 allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter...

CVE-2002-1026

Macromedia Sitespring 1.2.0 277.1 using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service crash via a long malformed request to TCP port 2500, possibly triggering a buffer overflow...

CVE-2002-1027

CVE-2002-1027 describes a cross-site scripting flaw in Macromedia Sitespring 1.2.0 (277.1). The vulnerability resides in the default HTTP 500 error script (500error.jsp); an attacker can craft a link to 500error.jsp containing script in the 1the et parameter to execute arbitrary web script in a v...

CVE-2002-1027

Cross-site scripting vulnerability in the default HTTP 500 error script 500error.jsp for Macromedia Sitespring 1.2.0 277.1 allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter...

CVE-2002-1026

CVE-2002-1026 affects Macromedia Sitespring 1.2.0 (277.1) using the Sybase runtime engine 7.0.2.1480. The vulnerability allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow. Impact is listed as partial av...

CVE-2002-0476

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...

CVE-2002-0801

Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file...

CVE-2002-0846

The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length...

Macromedia Flash plugin can read local files

.---. .---------- / / ------ / / / ----- ////// ' / --- //// / // : : --- // / / / '-- // //.. ====UU====UU==== '//|| Macromedia Flash plugin can read local files Description : Macromedia Flash Player is the leading rich client for Internet content and applications across the broadest range of...

KPMG-2002032: Macromedia Sitespring Cross Site Scripting

-------------------------------------------------------------------- Title: Macromedia Sitespring Cross Site Scripting BUG-ID: 2002032 Released: 17th Jul 2002 -------------------------------------------------------------------- Problem: ======== A malicious user could use a default error page as...

Crossite scripting in Macromedia Sitespring

Crossite scripting via 500error.jsp...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting...

Macromedia Sitespring 1.2 - Default Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5249/info Macromedia Sitespring is a J2EE-compliant product for managing website production. The Macromedia Sitespring server runs on Microsoft Windows operating systems. A cross-site scripting issue has been reported in the default error page used by...

CVE-2002-0665

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

Macromedia JRun 34 - Administrative Authentication Bypass

Macromedia JRun 34 - Administrative Authentication Bypass source: https://www.securityfocus.com/bid/5118/info Macromedia JRun is prone to an issue which may allow remote attackers to bypass the authentication page for the admin server. This may be exploited by adding an extraneous '/' to a reques...

CVE-2002-0605

Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 6,0,23,0 allows remote attackers to execute arbitrary code via a long movie parameter...

Macromedia JRun 34 JSP Engine - Denial of Service

Macromedia JRun 34 JSP Engine - Denial of Service source: https://www.securityfocus.com/bid/4997/info A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page. The following...

CVE-2002-0476

Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand...

CVE-2002-0477

Standalone Macromedia Flash Player 5.0 prior to 5,0,30,2 is vulnerable to remote code execution via a SWF file that uses the exec FSCommand. Root cause: the SWF can trigger arbitrary program execution on the host. Impact is remote code execution with the affected component being the Flash Player ...

CVE-2002-0476

Macromedia Flash Player 5.0 (Standalone) is affected by CVE-2002-0476. A .SWF file containing the undocumented “save” FSCommand can cause the player to save arbitrary files and programs on the host. The documents here do not provide details on exploit practicality, affected versions beyond Flash ...