CVE-2005-0786: Undefined Security Weakness

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

CVE-2004-1682: Undefined Security Weakness

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

CVE-2004-0291: Undefined Security Weakness

SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter...

CVE-2004-0046: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' double quote character...

CVE-2003-0980

CVE-2003-0980 is an XSS vulnerability in FreeScripts VisitorBook LE (visitorbook.pl). The issue permits remote attackers to inject arbitrary HTML or JavaScript via (1) the do parameter, (2) the user parameter from a host with a malicious reverse DNS name, and (3) quote marks or ampersands in othe...

CVE-2001-1109: Undefined Security Weakness

Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. dot dot in the 1 LIST, 2 QUOTE SIZE, and 3 QUOTE MDTM commands...

PT-2001-2252 · Eftp · Eftp

Name of the Vulnerable Software and Affected Versions: EFTP version 2.0.7.337 Description: A directory traversal issue allows remote authenticated users to reveal directory contents by using a .. dot dot in the LIST, QUOTE SIZE, and QUOTE MDTM commands. Recommendations: For EFTP version 2.0.7.337...

Quote generator 0.01 by Eric Persson

Hi all, Quote generator 0.01 php script by eric personn is vulnerable to the ../.. bug try this : www.yourhost.com/quote.html?filename=../../../../../../../../../../../../../ ../../../etc/issue&pathtofontfile=ariali.ttf It gives you the content of /etc/issue file regards, --- Cabezon Aurйlien...

En: ubb hole

----- Original Message ----- From: tdf To: [email protected] Sent: Monday, November 20, 2000 2:46 PM Subject: ubb hole ----------------------------------------------------------------------------------- Ultimate Bulletin Board - Private forums security hole, by tdf [email protected]...

CVE-2000-0636

HP JetDirect printers, versions G.08.20 and H.08.20 and earlier, are affected by a vulnerability described as a denial of service caused by a malformed FTP QUOTE command. The issue is triggered remotely, with no authentication required, and affects the availability impact as noted in the linked r...

CVE-2000-0636: Undefined Security Weakness

HP JetDirect printers versions G.08.20 and H.08.20 and earlier allow remote attackers to cause a denial of service via a malformed FTP quote command...

Quote of the Day (QOTD) Service Detection

A server listens for TCP connections on TCP port 17. Once a connection is established a short message is sent out the connection and any data received is thrown away. The service closes the connection after sending the quote. Another quote of the day service is defined as a datagram based...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

CVE-1999-0075

The CVE-1999-0075 issue affects the wu-ftpd daemon, where handling of a QUOTE PASV command after a username/password can cause a core dump. This vulnerability can lead to an information disclosure (core file containing usernames and passwords) and a forced denial of service via remote triggering ...

CVE-1999-0201: Undefined Security Weakness

A quote cwd command on FTP servers can reveal the full path of the home directory of the "ftp" user...

CVE-1999-0075: Undefined Security Weakness

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...

WU-FTPD QUOTE PASV Forced Core Dump Information Disclosure

The remote FTP server fails to handle QUOTE PASV requests for logged in users. An attacker can send a specially crafted requests to cause the service to die and dump core. The core file contains the usernames and passwords of all users. C Tenable Network Security, Inc. include"compat.inc";...

CVE-1999-0075

PASV core dump in wu-ftpd daemon when attacker uses a QUOTE PASV command after specifying a username and password...