2468 matches found
CVE-2004-1840
Multiple cross-site scripting XSS vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the 1 screen parameter to modules.php, 2 modulename parameter to title.php, 3 sortby parameter to modules.php, or 4 overview parameter to...
CVE-2004-1839
MS Analysis module 2.0 for PHP-Nuke exposes full path disclosure via direct requests to browsers.php, mstrack.php, or title.php, enabling Information Disclosure without user interaction. Root cause: PHP error messages reveal filesystem paths. The provided documents do not specify a patched versio...
CVE-2004-1841
CVE-2004-1841 concerns a SQL injection in MS Analysis module 2.0 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the Referer header in an HTTP request. The available documents identify the affected component and the general vulnerability class but do not provide version-speci...
CVE-2004-1841
SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request...
Immunity Canvas: MS05_021
Name| ms05021 ---|--- CVE| CVE-2005-0560 Exploit Pack| CANVAS Description| MS Exchange 2000 MS05-021 X-LINK2STATE heap overflow Notes| CVE Name: CVE-2005-0560 VENDOR: Microsoft MSADV: MS05-021 CVSS: 7.5 CVE Url: https://vulners.com/cve/CVE-2005-0560 Notes: This exploit is reliable over and over...
CVE-2005-0275
TFTP in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to cause a denial of service application crash via a GET request containing an MS-DOS device name...
CVE-2005-0278
The FTP service in 3Com 3CDaemon 2.0 revision 10 allows remote attackers to gain sensitive information via a cd command that contains an MS-DOS device name, which reveals the installation path in an error message...
MS Windows WINS Vulnerability and OS/SP Scanner
Exploit for unknown platform in category remote exploits =============================================== MS Windows WINS Vulnerability and OS/SP Scanner =============================================== / HAT-SQUAD WINS VULNERABILITY/OS SCANNER ------------------------------------...
MS Exchange Server Remote Code Execution Exploit (MS05-021)
Exploit for unknown platform in category remote exploits =========================================================== MS Exchange Server Remote Code Execution Exploit MS05-021 =========================================================== !/bin/perl MS05-021 Exchange X-LINK2STATE Heap Overflow Author...
MS Internet Explorer DHTML Object Memory Corruption Exploit
Exploit for unknown platform in category remote exploits =========================================================== MS Internet Explorer DHTML Object Memory Corruption Exploit =========================================================== This program is free software; you can redistribute it and/o...
MS Jet Database (msjet40.dll) DB File Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ============================================================= MS Jet Database msjet40.dll DB File Buffer Overflow Exploit ============================================================= / -------------------------------------- Microsoft Jet...
CVE-2005-0799
MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...
CVE-2005-0799
MySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to cause a denial of service application crash via a use command followed by an MS-DOS device name such as 1 LPT1 or 2 PRN...
MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow
Exploit for unknown platform in category remote exploits ============================================================= MS Internet Explorer "mshtml.dll" CSS Parsing Buffer Overflow ============================================================= / The exploit will create a .CSS file that should be...
CVE-2004-0466
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service hang via a URL containing an MS-DOS device name such as 1 AUX, 2 CON, 3 PRN, 4 COM1, or 5 LPT1...
OpenConnect Webconnect MS-DOS device name denial-of-service
Overview OpenConnect WebConnect may stop responding after processing an HTTP request with an MS-DOS device name in it. Description OpenConnect Webconnect provides secured web access and emulation services for backend mainframes and UNIX servers. Versions of Webconnect prior to 6.4.5 and 6.5.1...
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service application crash via a STORE UNIQUE STOU command with an MS-DOS device name argument such as 1 COM1, 2 LPT1, 3 PRN, or 4 AUX...
CVE-2004-1514
04WebServer 1.42 is affected by a DoS vulnerability triggered by an HTTP request for an MS-DOS device name (e.g., COM2), causing the server to fail to restart properly. The CVE entry notes a partial availability impact. No additional exploit details or fixes are provided in the connected documents.
