CVE-2005-4266

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value...

CVE-2005-4266

The CVE-2005-4266 issue affects Alt-N MDaemon/WorldClient (WorldClient.dll) where WorldClient 8.1.3 trusts a Session parameter containing a randomly generated session ID linked to a username. This enables remote attackers to impersonate other users by guessing or sniffing the session value. Conne...

CVE-2005-4266: Undefined Security Weakness

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote attackers to perform actions as other users by guessing or sniffing the random value...

CVE-2005-4194

The vulnerability CVE-2005-4194 affects Sights 'n Sounds Streaming Media Server (MediaServerList.exe) version 2.0.3.a. A buffer overflow allows remote attackers to trigger a denial of service (application crash) by supplying a long query string. There is no remediation or patch information provid...

CVE-2005-4209

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting XSS...

CVE-2005-4209: Improper Control of Generation of Code

WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting XSS...

CVE-2005-4194: Undefined Security Weakness

Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service application crash via a long query string...

Sights N Sounds Streaming Media Server 2.0.3 - SWS.exe Buffer Overflow

Sights N Sounds Streaming Media Server 2.0.3 - SWS.exe Buffer Overflow source: https://www.securityfocus.com/bid/15809/info Sights 'n Sounds Streaming Media Server is prone to a buffer overflow vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied...

CVE-2005-3930

The CVE-2005-3930 entry concerns N-13 News 1.2 where a vulnerability in index.php allows SQL injection through the id parameter. The underlying issue enables remote attackers to execute arbitrary SQL commands (as described in the initial record). The available documents do not specify affected ve...

CVE-2005-3930

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3930

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3930: Undefined Security Weakness

SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

N-13 News Remote SQL/PHP Shell injection

?php 0 day -- 29/11/2005 N-13 News Remote SQL / PHP-Shell Injection Just upload in a web-server with modphp and run it trhough your browser ; Affected Software : http://network-13.com/ N-13 News Version: All Exploit discovere and written by: KingOfSka @ http://contropotere.altervista.org Conditio...

N-13 News 1.2 - SQL Injection

source: https://www.securityfocus.com/bid/15643/info N-13 News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database...

N-13 News 1.2 - SQL Injection

N-13 News 1.2 - SQL Injection source: https://www.securityfocus.com/bid/15643/info N-13 News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilitie...

CVE-2003-1251

The 1 menu.inc.php, 2 datasets.php and 3 massoperations.inc.php mistakenly referred to as massopeations.inc.php scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a cpath that references a URL on a remote web server that contains the code...

CVE-2003-1251

CVE-2003-1251 affects the N/X Web Content Management System. The vulnerable scripts are (1) menu.inc.php, (2) datasets.php, and (3) mass_operations.inc.php (often misspelled as mass_opeations.inc.php). The vulnerability arises from a remote-file-include flaw where a c_path references a URL on a r...

CVE-2003-1251: Undefined Security Weakness

The 1 menu.inc.php, 2 datasets.php and 3 massoperations.inc.php mistakenly referred to as massopeations.inc.php scripts in N/X 2002 allow remote attackers to execute arbitrary PHP code via a cpath that references a URL on a remote web server that contains the code...

CVE-2004-2504

The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges...

CVE-2004-2504

The CVE affects Alt-N Technologies MDaemon (7.2 and earlier, including 6.8). The GUI creates new files by launching child processes (e.g., NOTEPAD.EXE) with SYSTEM privileges, enabling local users with physical access to escalate privileges. Root cause is the GUI spawning and executing external e...