2732 matches found
Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection
Web4Future eDating Professional 5.0 - gift.php?cid SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using...
CVE-2005-3993
CVE-2005-3993 affects MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. The issue is multiple unspecified vulnerabilities that allow a denial of service (crash) via invalid IMAP commands. The provided documents do not specify the root cause details, affected versi...
Web4Future eDating Professional 5.0 - 'index.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
Web4Future eDating Professional 5.0 - 'fq.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
CVE-2005-3993
Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service crash via invalid IMAP commands...
Web4Future Affiliate Manager PRO SQL inj. vuln.
Web4Future Affiliate Manager PRO SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/web4future-affiliate-manager-pro-sql.html vendor:http://www.web4future.com/products.php?p=aff affected version:4.1 and prior Product Description: Affilia...
Web4Future eDating Professional 5.0 - 'gift.php?cid' SQL Injection
source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a...
Web4Future eDating Professional 5.0 - fq.php?cid SQL Injection
Web4Future eDating Professional 5.0 - fq.php?cid SQL Injection source: https://www.securityfocus.com/bid/15715/info eDating Professional is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using i...
CVE-2005-3813
IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...
CVE-2005-3813
IMAP service meimaps.exe of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service application crash by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690...
CVE-2005-3691
Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...
CVE-2005-3690
Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...
CVE-2005-3690
Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...
MailEnable HTTPMail Service GET Overflow Vulnerability
The target is running at least one instance of MailEnable - http://www.mailenable.com/ - that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which...
MUP overlong request kernel overflow Patch (Q311967)
Buffer overflow in Multiple UNC Provider MUP in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced...
MailEnable IMAP Service Search DoS Vulnerability
The target is running at least one instance of MailEnable's IMAP service. A flaw exists in MailEnable Professional Edition versions 1.5a-d that results in this service crashing if it receives a SEARCH command. An authenticated user could send this command either on purpose as a denial of service...
CVE-2005-3155
CVE-2005-3155 concerns a buffer overflow in the W3C logging functionality of MailEnable IMAPD. Publicly documented impact indicates remote code execution against MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. Exploit references (Metasploit module and SAINT/pack...
CVE-2005-2605
Unknown vulnerability in Lasso Professional Server8.0.4 and 8.0.5 allows attackers to bypass authentication, related to Auth tags...
CVE-2005-2605
CVE-2005-2605 pertains to an unknown vulnerability in Lasso Professional Server 8.0.4 and 8.0.5 that could allow an attacker to bypass authentication. The connected documents do not provide concrete technical details such as the root cause, affected components beyond the server versions, exploit ...