CVE-2000-0104

The Shoptron shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0108

The Intellivend shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

CVE-2000-0106

The EasyCart shopping cart application allows remote users to modify sensitive purchase information via hidden form fields...

PT-2000-1120 · Unknown · Check It Out

Name of the Vulnerable Software and Affected Versions: Check It Out affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

PT-2000-1098 · Unknown · Websitetool

Name of the Vulnerable Software and Affected Versions: WebSiteTool affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no information...

PT-2000-1089 · Make A Store · Make-A-Store Orderpage

Name of the Vulnerable Software and Affected Versions: Make-a-Store OrderPage affected versions not specified Description: The issue allows remote users to modify sensitive purchase information via hidden form fields in the shopping cart application. Recommendations: At the moment, there is no...

CVE-1999-0734

A default configuration of CiscoSecure Access Control Server ACS allows remote users to modify the server database without authentication...

CVE-1999-0734

CiscoSecure Access Control Server (ACS) is affected due to a default configuration that allows remote users to modify the server database without authentication. Affected product/component: CiscoSecure ACS; vulnerability involves unauthenticated access to modify the database via default settings....

CVE-1999-0991

CVE-1999-0991 affects GoodTech Telnet Server NT. The vulnerability is a buffer overflow that allows remote attackers to cause a denial of service by supplying a long login name. Documentation in the connected records confirms the affected product and the impact (denial of service), but does not p...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay

Phorum 3.0.7 - violation.php3 Arbitrary Email Relay source: https://www.securityfocus.com/bid/2272/info Phorum is a freely available, open source package originally written by Brian Moon. The package is designed to add enhanced features to a web page, allowing users to interact through bulletin...

CVE-1999-1167

Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation...

CVE-1999-0991

Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name...

CVE-1999-0838

Buffer overflow in Serv-U FTP 2.5 allows remote users to conduct a denial of service via the SITE command...

CVE-1999-0209

CVE-1999-0209 concerns SunView (SunTools) selection_svc; connected sources document a broader, concrete detail: Solaris SunRPC ypupdated RPC service vulnerable to remote command execution via MAP UPDATE handling, permitting command injection (shell) and potentially root-level execution on affecte...

CVE-1999-0150

The CVE-1999-0150 issue concerns the Perl fingerd service. Connected sources specify that the vulnerability allows arbitrary command execution from remote users and affects the finger package. Multiple entries indicate affected versions are those prior to 0.17-4, with a patched version 0.17-4 ava...

CVE-1999-0150

The Perl fingerd program allows arbitrary command execution from remote users...

CVE-1999-0191

CVE-1999-0191 affects Microsoft IIS via the CGI newdsn.exe script. The vulnerability exists in the /scripts/tools/newdsn.exe CGI, which allows remote attackers to create or overwrite files on the server if NTFS permissions permit, enabling arbitrary file creation and potential DSN overwrites. The...

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number

Linux Kernel 2.2 - Predictable TCP Initial Sequence Number source: https://www.securityfocus.com/bid/670/info A vulnerability in the Linux kernel allows remote users to guess the initial sequence number of TCP sessions. This can be used to create spoofed TCP sessions bypassing some types of IP...

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval

NCSA 1.31.4.x1.5 Apache HTTPd 0.8.110.8.14 - ScriptAlias Source Retrieval source: https://www.securityfocus.com/bid/2300/info NSCA httpd prior to and including 1.5 and Apache Web Server prior to 1.0 contain a bug in the ScriptAlias function that allows remote users to view the source of CGI...