Lucene search
K

5302 matches found

exploitpack
exploitpack
added 2006/02/11 12:0 a.m.11 views

HiveMail 1.2.21.3 - addressbook.update.php?contactgroupid Arbitrary PHP Command Execution

HiveMail 1.2.21.3 - addressbook.update.php?contactgroupid Arbitrary PHP Command Execution source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL...

0.6AI score
Exploits0
exploitpack
exploitpack
added 2006/02/11 12:0 a.m.18 views

HiveMail 1.2.21.3 - index.php $_SERVER[PHP_SELF] Cross-Site Scripting

HiveMail 1.2.21.3 - index.php $SERVERPHPSELF Cross-Site Scripting source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP...

Exploits0
exploitpack
exploitpack
added 2006/02/11 12:0 a.m.8 views

HiveMail 1.2.21.3 - folders.update.php?folderid Arbitrary PHP Command Execution

HiveMail 1.2.21.3 - folders.update.php?folderid Arbitrary PHP Command Execution source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection...

0.6AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/11 12:0 a.m.20 views

HiveMail 1.2.2/1.3 - 'folders.update.php?folderid' Arbitrary PHP Command Execution

source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP code-execution issues are the result of an input-validation error that...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/11 12:0 a.m.28 views

HiveMail 1.2.2/1.3 - 'index.php' $_SERVER['PHP_SELF'] Cross-Site Scripting

source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP code-execution issues are the result of an input-validation error that...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/11 12:0 a.m.35 views

HiveMail 1.2.2/1.3 - 'addressbook.update.php?contactgroupid' Arbitrary PHP Command Execution

source: https://www.securityfocus.com/bid/16591/info HiveMail is prone to multiple vulnerabilities. These vulnerabilities may allow the execution of arbitrary PHP code, cross-site scripting attacks, and SQL injection. The PHP code-execution issues are the result of an input-validation error that...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2006/01/25 12:0 a.m.43 views

[SA18480] E-Post Mail Server Products Multiple Vulnerabilities

TITLE: E-Post Mail Server Products Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18480 VERIFY ADVISORY: http://secunia.com/advisories/18480/ CRITICAL: Highly critical IMPACT: Security Bypass, Exposure of system information, DoS, System access WHERE: From remote SOFTWARE: E-Post Mail Server 4.x...

0.9AI score
Exploits0
securityvulns
securityvulns
added 2006/01/24 12:0 a.m.35 views

[VulnWatch] iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability

Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability iDefense Security Advisory 01.23.06 http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376 January 23, 2006 I. BACKGROUND iTechnology is an integration technology which provides standard...

10CVSS0.4AI score0.18645EPSS
Exploits0
Packet Storm
Packet Storm
added 2005/12/14 12:0 a.m.31 views

perl-cal-29920.txt

------=Part1714122617522.1134045408185 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Vendor: Perl-Cal Version tested: Perl-Cal 2.99.20 , other versions may also be affected. Type: Cross Site Scripting Severity: Medium...

7.4AI score
Exploits0
OSV
OSV
added 2005/12/05 12:0 a.m.2 views

DTSA-25-1 smb4k - access validation error

Bulletin has no description...

2.1CVSS6.4AI score0.00364EPSS
Exploits0
exploitpack
exploitpack
added 2005/11/04 12:0 a.m.14 views

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify acce...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2005/11/04 12:0 a.m.17 views

Ocean12 ASP Calendar Manager 1.0 - Authentication Bypass

source: https://www.securityfocus.com/bid/15329/info Ocean12 ASP Calendar Manager is prone to an authentication bypass vulnerability. This is due to to an access validation error in the application. The application does properly verify access privileges and allows the attacker to gain access to...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2005/11/03 12:0 a.m.13 views

rsync path sanitation vulnerability

A vulnerability has been reported in rsync, which potentially can be exploited by malicious users to read or write arbitrary files on a vulnerable system. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

6.4CVSS6.2AI score0.02317EPSS
Exploits0References1
Packet Storm
Packet Storm
added 2005/11/01 12:0 a.m.37 views

forumSQL.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Discovered BY ABDUCTER & Expliot BY DEVIL-00 [email protected] OR [email protected] Vulnerable:powered by oaboard 1.0 ////////////////////////////////// info:- FOR INFORMATION VISIT http://oaboard.myserver.at/oaboard/forum.ph...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2005/10/30 12:0 a.m.30 views

PBLang465.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In PBLang 4.65 ALL VERSION info PBLang IS POWER PHP SITES SUPPORT HERE http://pblang.drmartinus.de/ expliot...

7.4AI score
Exploits0
securityvulns
securityvulns
added 2005/10/29 12:0 a.m.25 views

File Including In PBLang

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In PBLang 4.65 ALL VERSION info PBLang IS POWER PHP SITES SUPPORT HERE http://pblang.drmartinus.de/ expliot...

0.2AI score
Exploits0
Packet Storm
Packet Storm
added 2005/10/26 12:0 a.m.33 views

flatnuke.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: No Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In FLAT NUKE ALL VERSION info FLAT NUKE IS POWER PHP SITES SUPPORT HERE http://flatnuke.sourceforge.net/flatnuke expliot...

7.4AI score
Exploits0
CERT
CERT
added 2005/10/26 12:0 a.m.24 views

Skype URI handling routine contains a buffer overflow

Overview A buffer overflow in Skype may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. There is a buffer overflow in the routines that handle Skype-specific URIs callto:// or skype://. The buffer overflow may...

9.3CVSS7.4AI score0.0587EPSS
Exploits0References3
securityvulns
securityvulns
added 2005/10/25 12:0 a.m.31 views

File Including In FLAT NUKE

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: No Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In FLAT NUKE ALL VERSION info FLAT NUKE IS POWER PHP SITES SUPPORT HERE http://flatnuke.sourceforge.net/flatnuke expliot...

0.9AI score
Exploits0
CERT
CERT
added 2005/10/11 12:0 a.m.29 views

Microsoft Collaboration Data Objects buffer overflow

Overview A buffer overflow in Microsoft Collaboration Data Objects may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Collaboration Data Objects CDO is a scripting library used to develop applications that handle email. Note that C...

7.5CVSS7.3AI score0.43446EPSS
Exploits0References1
Rows per page
Query Builder