CVE-2009-1590

CVE-2009-1590 concerns CGI RESCUE FORM2MAIL prior to 1.42, where a vulnerability in an HTML form-enabled mailer allows a remote attacker to cause arbitrary recipient emails to be sent. Connected sources (JVN/JVNDB, Red Hat, NVD) confirm: FORM2MAIL could send emails independent of configuration, e...

CVE-2009-1591

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting XSS or HTTP response splitting attacks, via CRLF sequences in an unspecified web form...

CVE-2009-1590

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form...

CVE-2009-1588

Cross-site scripting XSS vulnerability in CGI RESCUE MiniBBS 8t before 8.95t, 8 before 8.95, 9 before 9.08, and 10 before 10.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-1589

Unspecified vulnerability in CGI RESCUE MiniBBS22 before 1.01 allows remote attackers to send email to arbitrary recipients via unknown vectors...

Web Mailer from CGI RESCUE vulnerable to HTTP header injection

Overview Web Mailer from CGI RESCUE contains a HTTP header injection vulnerability. Web Mailer from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. Web Mailer contains a HTTP header injection vulnerability. This vulnerability has been fixed and an updated...

FORM2MAIL from CGI RESCUE allows unauthorized email transmission

Overview FORM2MAIL from CGI RESCUE contains a vulnerability which allows unauthorized email transmission regardless of the configuration. FORM2MAIL from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. FORM2MAIL contains a vulnerability which allows...

Cross-site scripting vulnerability in MiniBBS from CGI RESCUE

Overview MiniBBS from CGI RESCUE contains a cross-site scripting vulnerability. MiniBBS is a message board script provided by CGI RESCUE, contains a cross-site scripting vulnerability. This vulnerability has been fixed and an updated version was released on December 13, 2008. Impact An arbitrary...

JVN#36982346 MiniBBS22 from CGI RESCUE allows unauthorized email transmission

MiniBBS22 is a message board script provided by CGI RESCUE. MiniBBS22 contains a vulnerability which allows unauthorized email transmission regardless of the configuration. Impact A remote attacker may send any email to an arbitrary address. Solution Update the software Update to the latest versi...

JVN#76370393 FORM2MAIL from CGI RESCUE allows unauthorized email transmission

FORM2MAIL from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. FORM2MAIL contains a vulnerability which allows unauthorized email transmission regardless of the configuration. Impact A remote attacker may send emails to arbitrary addresses. Solution Updat...

JVN#28020230 Web Mailer from CGI RESCUE vulnerable to HTTP header injection

Web Mailer from CGI RESCUE is a software that sends emails with contents that are input into a HTML form. Web Mailer contains a HTTP header injection vulnerability. Impact Falsified information may be displayed or an arbitrary script may be executed on the user's web browser. HTTP response...

JVN#11396739 Cross-site scripting vulnerability in MiniBBS from CGI RESCUE

MiniBBS is a message board script provided by CGI RESCUE, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by the vendor. Products...

Directory traversal

Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-5723

Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2008-5723

CVE-2008-5723 describes a directory traversal vulnerability in CGI RESCUE KanniBBS2000 (also known as MiniBBS2000/MiniBBS2000i) prior to version 1.03, enabling a remote attacker to read arbitrary files on the server. Connected sources specify that affected products include MiniBBS2000/v1.02 and e...

CVE-2008-5723

Directory traversal vulnerability in CGI RESCUE KanniBBS2000 aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i before 1.03 allows remote attackers to read arbitrary files via unspecified vectors...

JVN#86833991 CGI RESCUE MiniBBS2000 directory traversal vulnerability

MiniBBS2000, a message board script provided by CGI RESCUE, contains a directory traversal vulnerability. Impact A remote attacker could view files on the server where MiniBBS2000 is installed. This could lead to disclosure of file contents. Solution Update the Software Update to the latest versi...

Lenovo Rescue and Recovery tvtumon.sys Filename Handling Local Overflow

The version of Lenovo Rescue and Recovery monitor driver running on the remote host is affected by a heap overflow condition. A local attacker may exploit this to elevate privileges to SYSTEM level. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34432;...

CVE-2008-4589

Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name...

Heap overflow

Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name...