Unfixed XSS vulnerability at eelink.net

Security researcher holisticinfosec, has submitted on 15/01/2008 a cross-site-scripting XSS vulnerability affecting eelink.net, which at the time of submission ranked 502811 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/01/2008. It is...

FreeBSD : py-django -- denial of service vulnerability (d2c2952d-85a1-11dc-bfff-003048705d5a)

Django project reports : A per-process cache used by Django's internationalization 'i18n' system to store the results of translation lookups for particular values of the HTTP Accept-Language header used the full value of that header as a key. An attacker could take advantage of this by sending...

CVE-2003-1384

Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...

CVE-2003-1384

The CVE-2003-1384 entry describes a Cross-site scripting (XSS) vulnerability in PY-Livredor 1.0, specifically in index.php. The affected component is the web form fields (titre, Votre pseudo, Votre e-mail, Votre message). The underlying cause is improper handling of user-supplied input, enabling ...

CVE-2003-1384: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PY-Livredor 1.0 allows remote attackers to insert arbitrary web script or HTML via the 1 titre, 2 Votre pseudo, 3 Votre e-mail, or 4 Votre message fields...

CVE-2002-1884

CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...

CVE-2002-1884

index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin"...

CVE-2002-1884: Undefined Security Weakness

index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin"...

CVE-2005-0734

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service memory exhaustion and process crash via a large number of HTTP requests...

CVE-2005-0732

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message...

CVE-2005-0730

CVE-2005-0730 involves PY Software’s Active WebCam WebServer (webcam.exe) 5.5. The connected sources describe concrete issues: (1) Denial of Service by requesting a file on the floppy drive (A:\a.txt), (2) path disclosure via error messages revealing installation paths for nonexistent files, and ...

CVE-2005-0731

CVE-2005-0731 affects PY Software Active Webcam WebServer (webcam.exe) 5.5. A remote attacker can trigger a denial of service by requesting Filelist.html, leading to increased CPU usage and service impact. The NVD lists a base score of 5.0 (MEDIUM) with network attack vector and partial availabil...

CVE-2005-0732

The CVE-2005-0732 entry concerns PY Software Active Webcam WebServer (webcam.exe) v5.5. Public sources (NVD) state that remote attackers can cause the server to disclose the full installation path by requesting a non-existent filename, leaking the path in an error message. This is classified with...

CVE-2005-0734

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service memory exhaustion and process crash via a large number of HTTP requests...

CVE-2005-0730

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt...

CVE-2005-0734

CVE-2005-0734 affects PY Software’s Active WebCam WebServer (webcam.exe) version 5.5. The available documents state that remote attackers can cause a denial of service through a flood of HTTP requests, leading to memory exhaustion and a process crash. The root cause is not explicitly detailed in ...

CVE-2005-0734: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service memory exhaustion and process crash via a large number of HTTP requests...

CVE-2005-0733: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not...

CVE-2005-0730: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to cause a denial of service via a request to a file on the floppy drive, as demonstrated using A:\a.txt...

CVE-2005-0732: Undefined Security Weakness

PY Software Active Webcam WebServer webcam.exe 5.5 allows remote attackers to obtain the full path of the web server via a request for a non-existent filename, which leaks the full path in an error message...