EUVD-2004-1830

Malware in sbrugna...

EUVD-2003-1452

Malware in sbrugna...

CVE-2003-1462

modsurvey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service disk consumption and possible crash...

CVE-2003-1462

CVE-2003-1462 affects mod_survey 3.0.0 through 3.0.15-pre6. The issue arises because it does not validate whether a survey exists before creating a subdirectory, which can be exploited remotely to cause disk consumption and potentially crash the service (DoS). Exploitation details are not provide...

CVE-2004-1837

Cross-site scripting XSS vulnerability in Modsurvey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings...

CVE-2004-1837

CVE-2004-1837 affects Mod_survey versions 3.0.x prior to 3.0.16-pre2 and 3.2.x prior to 3.2.0-pre4, which are vulnerable to cross-site scripting (XSS). The flaw allows remote attackers to inject arbitrary web script or HTML through certain survey fields or error messages when query strings are ma...

CVE-2004-1837

Cross-site scripting XSS vulnerability in Modsurvey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings...

mod_survey < 3.0.14e / 3.0.15pre6 ENV tags SQL Injection

Binary data 1534.prm...

Apache mod_survey crossite scripting

No description provided...

CVE-2003-1462

modsurvey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which allows remote attackers to cause a denial of service disk consumption and possible crash...

mod_survey For Apache ENV Tags SQL Injection

According to the banner, the remote host is using a vulnerable version of modsurvey, a Perl module for managing online surveys. This version has a flaw that could result in a SQL injection attack when the module is being used with a database backend. A remote attacker could exploit this to take...

Mod_Survey ENV tag vulnerability

Attached is a security advisory for ModSurvey, which is a modperl module for apache see attachment. The advisory was first published 2003-03-23 at http://gathering.itm.mh.se/modsurvey/SA20030323.txt More info about ModSurvey can be found on its home page, which is available at...