CVE-2004-1624

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

CVE-2004-1624: Undefined Security Weakness

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

phpbb 2.0.11 bug

PHPBB 2.0.11 is vulnable to a path disclosure.All you need is a valid topic and for highlight put .Here is a sample: http://www.site.com/forum/viewtopic.php?t=2&highlight= Here is the messege you will get: Warning: Compilation failed: missing at offset 7 in c:appservwwwforumviewtopic.php1109 :...

CVE-2004-2733

Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to 1 block arbitrary IP addresses via popupipblocking.asp or 2 modify topics via popuptopicadmin.asp...

CVE-2004-1624

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via 1 the help topic interface in CCW32.exe, which launches Notepad, or 2 the help button in the Carbon Copy Scheduler CCSched.exe...

CVE-2003-0009: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter...

Adam Ismay Print Topic Mod 1.0 - SQL Injection

Adam Ismay Print Topic Mod 1.0 - SQL Injection source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied UR...

Adam Ismay Print Topic Mod 1.0 - SQL Injection

source: https://www.securityfocus.com/bid/10757/info Print Topic Mod is reportedly affected by a remote SQL injection vulnerability in the 'printview.php' script. This issue is due to a failure of the application to properly sanitize user-supplied URI parameter input before using it in an SQL...

CVE-2004-0474: Undefined Security Weakness

Help Center HelpCtr.exe may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue...

Topic Calendar 1.0.1 - 'Calendar_Scheduler.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute...

Topic Calendar 1.0.1 - Calendar_Scheduler.php Cross-Site Scripting

Topic Calendar 1.0.1 - CalendarScheduler.php Cross-Site Scripting source: https://www.securityfocus.com/bid/12893/info Topic Calendar is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...

CVE-2002-0984: Undefined Security Weakness

The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code...

CVE-2002-0962: Undefined Security Weakness

Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via 1 the url variable in the Link field of a calendar event, 2 the topic parameter in index.php, or 3 the title parameter in comment.php...

CVE-2002-0983: Undefined Security Weakness

IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service crash via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow...

[SECURITY] [DSA 157-1] New irssi-text packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 157-1 [email protected] http://www.debian.org/security/ Martin Schulze August 23rd, 2002 http://www.debian.org/security/faq -...

DSA-157 irssi-text - denial of service

Bulletin has no description...

CVE-2002-0535

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via 1 an IMG tag when BBCode is enabled, or 2 in a topic title...

YaBB 1 - Invalid Topic Error Page Cross-Site Scripting

source: https://www.securityfocus.com/bid/5078/info It is reported possible for attackers to construct a URL that will cause scripting code to be embedded in error pages. YaBB fails to check URLs for the presence of script commands when generating error pages, allowing attacker supplied code to...

irssis DoS

Channel topic processing problems...

DoS on irssi 0.8.4

DoS on irssi 0.8.4 current version 1. Aplication description: Irssi is a modular IRC client for UNIX systems. It runs on text mode user interface, or on graphic mode user using GTK+. You can donwload irssi and get more information about it from official website, http://www.irssi.org 2. Problem...