CVE-2001-0301

Vulnerability CVE-2001-0301 affects Analog prior to version 4.16. A remote attacker can exploit via the ALIAS command to construct long strings and execute arbitrary commands. Impact is remote code execution with complete confidentiality/integrity/availability. Remediation: upgrade Analog to 4.16...

CVE-2002-1154

CVE-2002-1154 affects Analog before 5.23. The ANALOG module (anlgform.pl) does not restrict access to the PROGRESSFREQ progress update command, enabling remote attackers to trigger a DoS by issuing frequent progress updates and filling the web server error log. Affected component: anlgform.pl in ...

CVE-2002-0166

CVE-2002-0166 covers a cross-site scripting vulnerability in analog prior to 5.22 where an HTTP request containing script text is logged and not properly sanitized during display, enabling a remote attacker to execute JavaScript. Affected: analog (pre-5.22). Root cause: insufficient filtering of ...

CVE-1999-1287

Technical details about CVE-1999-1287 are not publicly available in the provided connected documents. The initial description is known, but no explicit affected products, versions, or exploit information are supplied here. Monitor for updates.