3798 matches found
CVE-2005-0157
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...
DEBIAN-CVE-2005-0157
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...
CVE-2005-0157
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...
CVE-2005-0157: Undefined Security Weakness
The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned...
[UNIX] vBulletin SQL Injection While Verifying Subscription Information
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
APBoard-Bug
Product: APBoard-Bug Versions: tested on 2.02 Vulnerability: users can subscribe a thread in the internal forum Date: Dezember 5, 2002 Discovered by: DNA [email protected] Introduction: Normal Users can read new answers to a thread in the internal forum I have already informed APP about this...
CVE-2002-0855
CVE-2002-0855 describes a cross-site scripting vulnerability in Mailman prior to 2.0.12. Theissue allows remote attackers to execute script as other users by crafting a subscriber’s list subscription options in the ml-name feature via the (1) adminpw or (2) info parameters. Connected advisories c...
CVE-2002-0855
Removed by vendor...
[SA-2002:00] Slashcode login vulunerability
SA-2002:00 Slashcode login vulunerability RISK FACTOR: HIGH SYNOPSIS Slash, the code that runs Slashdot and many other web sites, has a vulnerability in recent versions that allows any logged-in user to log in as any other user. This allows users to take nearly full control of a Slash system post...
nph-maillist 3.0/3.5 - Arbitrary Code Execution
source: https://www.securityfocus.com/bid/2563/info nph-maillist is a Perl CGI script that handles mailing lists, typically used to notify interested users of site updates. A hostile user can enter commands embedded in an email address via the subscription form, and then force a mailing which wil...
nph-maillist 3.03.5 - Arbitrary Code Execution
nph-maillist 3.03.5 - Arbitrary Code Execution source: https://www.securityfocus.com/bid/2563/info nph-maillist is a Perl CGI script that handles mailing lists, typically used to notify interested users of site updates. A hostile user can enter commands embedded in an email address via the...
Update For Exchange Server Subscription Edition (KB5081755)
Update For Exchange Server Subscription Edition KB5081755...
PT-2008-6917 · Mozilla +1 · Firefox +11
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.17 libxul0d-dbg affected versions not specified libxul-dev affected versions not specified libsmjs1 affected versions not specified libmozjs0d-dbg affected versions not specified libmozjs0d affected...
Security Update For Exchange Server Subscription Edition (KB5121608)
Security Update For Exchange Server Subscription Edition KB5121608...
Security Update For Exchange Server Subscription Edition (KB5094139)
The update addresses the fixes descripted in the KB...
Security Update For Exchange Server Subscription Edition (KB5103212)
Security Update For Exchange Server Subscription Edition KB5103212...
SharePoint Server Subscription Edition
SharePoint Server Subscription Edition...
Security Update for Microsoft SharePoint Server Subscription Edition (KB5002822) farm-deployment
A security vulnerability exists in Microsoft SharePoint Server Subscription Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...