4252 matches found
CVE-2003-1536
Multiple cross-site scripting XSS vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via 1 the q parameter to search.php and 2 the year parameter to calendar.php...
CVE-2007-5802
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a...
Directory traversal
Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: this can be leveraged to obtain the path by including a local PHP script with a...
CVE-2007-5802
CVE-2007-5802 affects Firewolf Technologies Synergiser 1.2 RC1 and earlier. A directory traversal in index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the page parameter. This may enable including a local PHP script with a duplicate function decla...
CVE-2004-2745
The CVE-2004-2745 entry describes a directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier, allowing remote attackers to read arbitrary files via a .. sequence in a URL. Affected component: OwnServer (version 1.0 and earlier). Underlying cause and exact root cau...
CVE-2004-2745
Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in a URL...
[SECURITY] Fedora 7 Update: galeon-2.0.3-12.fc7
Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...
CVE-2003-1463
CVE-2003-1463 describes an absolute path traversal flaw in Alt-N Technologies WebAdmin 2.0.0–2.0.2. With administrator privileges, an attacker can (1) determine the installation path by reading the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter. ...
CVE-2003-1463
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to 1 determine the installation path by reading the contents of the Name parameter in a link, and 2 read arbitrary files via an absolute path in the Name...
Immunity Canvas: LSHTTPD_DISC
Name| lshttpddisc ---|--- CVE| CVE-2007-5654 Exploit Pack| CANVAS Description| Litespeed HTTPD file disclosure Notes| CVSS: 5.0 Repeatability: Infinite VENDOR: LiteSpeed Technologies CVE Url: https://vulners.com/cve/CVE-2007-5654 CVE Name: CVE-2007-5654...
CVE-2003-1363
The CVE affects Aprelium Technologies Abyss Web Server 1.1.2 and earlier, where the remote web management interface on port 9999 fails to log connection attempts. This lack of logging can enable remote brute-force attacks against the administration console without detection. The available connect...
CVE-2003-1364
Summary: CVE-2003-1364 affects Aprelium Technologies Abyss Web Server (likely 1.1.2 and possibly older before 1.1.4). A remote attacker can cause a denial of service (server crash) by sending an HTTP GET request with empty headers in the Connection or Range fields. The OpenVAS/Nessus entries corr...
CVE-2003-1363
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...
CVE-2003-1364
Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service crash via an HTTP GET message with empty 1 Connection or 2 Range fields...
Quintum Technologies VoIP Server Detection
Binary data 4241.prm...
Core Security Technologies Advisory 2007.0817
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies – CoreLabs Advisory http://www.coresecurity.com/corelabs Remote command execution, HTML and JavaScript injection vulnerabilities in AOL’s Instant Messaging software Advisory Information Title: Remote Command execution, HTML...
Path traversal
Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode ActiveX 3.0.0.1 and earlier allow remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveAsBMP or 2 SaveAsWMF...
MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------------- bMW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite/b url:...
MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit
Exploit for unknown platform in category remote exploits ================================================================= MW6 Technologies QRCode ActiveX 3.0 Remote File Overwrite Exploit =================================================================...
MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite
MW6 Technologies QRCode ActiveX 3.0 - Remote File Overwrite ----------------------------------------------------------------------------- MW6 Technologies QRCode ActiveX 3.0 MW6QRCode.dll Remote File Overwrite url: www.mw6tech.com Author: shinnai mail: shinnaiatautisticidotorg site:...