security flaw

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

PT-2005-4309 · Vubb · Vubb

Name of the Vulnerable Software and Affected Versions: VUBB alpha rc1 Description: The issue allows remote attackers to obtain the installation path of the application. This can be achieved by using the viewforum action with the f parameter set to a single quote '. Recommendations: For VUBB alpha...

PT-2005-4310 · Chipmunk · Chipmunk Forum

Name of the Vulnerable Software and Affected Versions: Chipmunk Forum script affected versions not specified Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the forumID...

PunBB URL Quote Tag XSS

The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. With a specially-crafted URL...

PunBB URL Quote Tag XSS

According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Check for Quote of the Day (qotd) Service (UDP)

The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Check for Quote of the Day (qotd) Service (TCP)

The Quote of the Day qotd service is running on this host. SPDX-FileCopyrightText: 1999 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-2933

Buffer overflow in the mailvalidnetparsework function in mail.c for Washington's IMAP Server UW-IMAP before imap-2004g allows remote attackers to execute arbitrary code via a mailbox name containing a single double-quote " character without a closing quote, which causes bytes after the double-quo...

CVE-2005-0786: Undefined Security Weakness

SQL injection vulnerability in gbnew.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the quote parameter to guestbook.php...

CVE-2004-1682: Undefined Security Weakness

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

CVE-2004-1682

Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...

CVE-2004-0291: Undefined Security Weakness

SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter...

CVE-2004-0046: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' double quote character...

CVE-2003-0980

CVE-2003-0980 is an XSS vulnerability in FreeScripts VisitorBook LE (visitorbook.pl). The issue permits remote attackers to inject arbitrary HTML or JavaScript via (1) the do parameter, (2) the user parameter from a host with a malicious reverse DNS name, and (3) quote marks or ampersands in othe...

CVE-2001-1109: Undefined Security Weakness

Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. dot dot in the 1 LIST, 2 QUOTE SIZE, and 3 QUOTE MDTM commands...

PT-2001-2252 · Eftp · Eftp

Name of the Vulnerable Software and Affected Versions: EFTP version 2.0.7.337 Description: A directory traversal issue allows remote authenticated users to reveal directory contents by using a .. dot dot in the LIST, QUOTE SIZE, and QUOTE MDTM commands. Recommendations: For EFTP version 2.0.7.337...

Quote generator 0.01 by Eric Persson

Hi all, Quote generator 0.01 php script by eric personn is vulnerable to the ../.. bug try this : www.yourhost.com/quote.html?filename=../../../../../../../../../../../../../ ../../../etc/issue&pathtofontfile=ariali.ttf It gives you the content of /etc/issue file regards, --- Cabezon Aurйlien...

En: ubb hole

----- Original Message ----- From: tdf To: [email protected] Sent: Monday, November 20, 2000 2:46 PM Subject: ubb hole ----------------------------------------------------------------------------------- Ultimate Bulletin Board - Private forums security hole, by tdf [email protected]...

CVE-2000-0636

HP JetDirect printers, versions G.08.20 and H.08.20 and earlier, are affected by a vulnerability described as a denial of service caused by a malformed FTP QUOTE command. The issue is triggered remotely, with no authentication required, and affects the availability impact as noted in the linked r...