708 matches found
Chatman <= 1.5.1 RC1 Broadcast Crash Exploit
Exploit for unknown platform in category dos / poc ============================================ Chatman include include ifdef WIN32 include include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system call"; break; case 10009: error = "Bad file number"...
CVE-2002-0594
CVE-2002-0594 affects Netscape 6 and Mozilla 1.0 RC1 and earlier. A CSS LINK element that triggers an HTTP redirect can let remote attackers determine the existence of local files, exposing partial confidentiality. The CVSS v2 base score is 5.0 (Network, Low complexity, No user interaction). Red ...
CVE-2002-1495
The CVE-2002-1495 entry documents a Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1. The vulnerability allows remote attackers to inject arbitrary script or HTML through multiple vectors: (1) attached file names in the Read Mail feature, (2) text/html mails displayed in a pop-up windo...
CVE-2002-0520
The CVE-2002-0520 entry describes an XSS in ASP-Nuke RC1 via the IMG tag in functions-inc.asp. The root cause is insufficient filtering of content within the [img] tag, allowing remote attackers to execute script in other users’ browsers. The affected software is ASP-Nuke RC1; exploitation detail...
CVE-2002-0216
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter...
CVE-2002-0217
CVE-2002-0217 affects XOOPS 1.0 RC1 — the Private Message System is vulnerable to cross-site scripting via the PM title/field or the image parameter in pmlite.php. The root cause is insufficient input filtering, allowing remote attackers to run Javascript in other users’ browsers. Documented impa...
CVE-2002-0216
CVE-2002-0216 affects XOOPS 1.0 RC1: the userinfo.php script is vulnerable to SQL injection via the uid parameter, allowing remote attackers to retrieve sensitive data. The vulnerability stems from improper handling of user input in SQL clauses (example: uid value causing a syntax error revealing...
