CVE-2002-1154

CVE-2002-1154 affects Analog before 5.23. The ANALOG module (anlgform.pl) does not restrict access to the PROGRESSFREQ progress update command, enabling remote attackers to trigger a DoS by issuing frequent progress updates and filling the web server error log. Affected component: anlgform.pl in ...

CVE-2001-0301

Vulnerability CVE-2001-0301 affects Analog prior to version 4.16. A remote attacker can exploit via the ALIAS command to construct long strings and execute arbitrary commands. Impact is remote code execution with complete confidentiality/integrity/availability. Remediation: upgrade Analog to 4.16...

CVE-1999-1287

Technical details about CVE-1999-1287 are not publicly available in the provided connected documents. The initial description is known, but no explicit affected products, versions, or exploit information are supplied here. Monitor for updates.

CVE-2002-0166

CVE-2002-0166 covers a cross-site scripting vulnerability in analog prior to 5.22 where an HTTP request containing script text is logged and not properly sanitized during display, enabling a remote attacker to execute JavaScript. Affected: analog (pre-5.22). Root cause: insufficient filtering of ...