|
359151
|
7.5 |
HIGH
|
powerphlogger
|
powerphlogger
|
PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.
|
NVD-CWE-Other
|
CVE-2002-1885
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359152
|
5.0 |
MEDIUM
|
tightauction
|
tightauction
|
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.
|
NVD-CWE-Other
|
CVE-2002-1886
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359153
|
7.5 |
HIGH
|
gregory_kokanosky
|
phpmynewsletter
|
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.
|
NVD-CWE-Other
|
CVE-2002-1887
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359154
|
2.1 |
LOW
|
commonname
|
commonname_toolbar
|
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain interna…
|
NVD-CWE-Other
|
CVE-2002-1888
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359155
|
5.0 |
MEDIUM
|
logsurfer
|
logsurfer
|
Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.
|
NVD-CWE-Other
|
CVE-2002-1889
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359156
|
2.1 |
LOW
|
redhat
|
rhmask
|
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
|
NVD-CWE-Other
|
CVE-2002-1890
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359157
|
7.5 |
HIGH
|
ayman_akt
|
ircit
|
Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
|
NVD-CWE-Other
|
CVE-2002-1891
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359158
|
2.1 |
LOW
|
netgear
|
fvs318
|
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information.
|
NVD-CWE-Other
|
CVE-2002-1892
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359159
|
4.3 |
MEDIUM
|
argosoft
|
argosoft_mail_server
|
Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message.
|
NVD-CWE-Other
|
CVE-2002-1893
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359160
|
4.3 |
MEDIUM
|
phpbb_group
|
phpbb
|
Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
|
NVD-CWE-Other
|
CVE-2002-1894
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359161
|
7.2 |
HIGH
|
alsaplayer
|
alsaplayer
|
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.
|
NVD-CWE-Other
|
CVE-2002-1896
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359162
|
4.3 |
MEDIUM
|
icewarp
|
web_mail
|
Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter.
|
NVD-CWE-Other
|
CVE-2002-1899
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359163
|
4.3 |
MEDIUM
|
pinboard
|
pinboard
|
Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists.
|
NVD-CWE-Other
|
CVE-2002-1900
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359164
|
4.3 |
MEDIUM
|
bodo_bauer
|
bbgallery
|
Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
|
NVD-CWE-Other
|
CVE-2002-1901
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359165
|
5.0 |
MEDIUM
|
markus_triska
|
cgiforum
|
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
|
NVD-CWE-Other
|
CVE-2002-1902
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359166
|
5.0 |
MEDIUM
|
university_of_washington
|
pine
|
Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.
|
NVD-CWE-Other
|
CVE-2002-1903
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359167
|
7.5 |
HIGH
|
gaztek
|
ghttpd
|
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-1904
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359168
|
5.0 |
MEDIUM
|
telcondex
|
simplewebserver
|
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
|
NVD-CWE-Other
|
CVE-2002-1907
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359169
|
5.0 |
MEDIUM
|
click2learn
|
ingenium_learning_management_system
|
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the admi…
|
NVD-CWE-Other
|
CVE-2002-1909
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359170
|
5.0 |
MEDIUM
|
zonelabs
|
zonealarm
|
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood). NOTE…
|
NVD-CWE-Other
|
CVE-2002-1911
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359171
|
5.0 |
MEDIUM
|
myphpnuke
|
myphpnuke
|
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.
|
NVD-CWE-Other
|
CVE-2002-1913
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359172
|
5.0 |
MEDIUM
|
pirch
|
pirch_irc
ruspirch
|
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filena…
|
NVD-CWE-Other
|
CVE-2002-1916
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359173
|
5.0 |
MEDIUM
|
geeklog
|
geeklog
|
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and a…
|
NVD-CWE-Other
|
CVE-2002-1917
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359174
|
5.0 |
MEDIUM
|
datawizard
|
ftpxq
|
Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.
|
NVD-CWE-Other
|
CVE-2002-1920
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359175
|
4.3 |
MEDIUM
|
jelsoft
|
vbulletin
|
Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url vari…
|
NVD-CWE-Other
|
CVE-2002-1922
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359176
|
5.0 |
MEDIUM
|
apc
|
powerchute
|
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
|
NVD-CWE-Other
|
CVE-2002-1924
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359177
|
5.0 |
MEDIUM
|
tiny_software
|
tiny_personal_firewall
|
Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Persona…
|
NVD-CWE-Other
|
CVE-2002-1925
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359178
|
5.0 |
MEDIUM
|
aquonics_scripting
|
aquonics_file_manager
|
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
|
NVD-CWE-Other
|
CVE-2002-1926
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359179
|
5.0 |
MEDIUM
|
software602
|
602pro_lan_suite
|
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
|
NVD-CWE-Other
|
CVE-2002-1928
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359180
|
4.3 |
MEDIUM
|
php_arena
|
pafiledb
|
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (…
|
NVD-CWE-Other
|
CVE-2002-1929
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359181
|
7.5 |
HIGH
|
an
|
an-httpd
|
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
|
NVD-CWE-Other
|
CVE-2002-1930
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359182
|
4.3 |
MEDIUM
|
php_arena
|
pafiledb
|
Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
|
NVD-CWE-Other
|
CVE-2002-1931
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359183
|
7.2 |
HIGH
|
microsoft
|
windows_2000_terminal_services
|
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal s…
|
NVD-CWE-Other
|
CVE-2002-1933
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359184
|
7.5 |
HIGH
|
utstarcom
|
bas_1000
|
UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of "*field", (2) guru account…
|
NVD-CWE-Other
|
CVE-2002-1936
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359185
|
5.0 |
MEDIUM
|
symantec
|
firewall_vpn_appliance_100
firewall_vpn_appliance_200
firewall_vpn_appliance_200r
|
Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address …
|
NVD-CWE-Other
|
CVE-2002-1937
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359186
|
7.5 |
HIGH
|
virgil
|
cgi_scanner
|
Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters.
|
NVD-CWE-Other
|
CVE-2002-1938
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359187
|
2.1 |
LOW
|
flashfxp
|
flashfxp
|
FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.
|
NVD-CWE-Other
|
CVE-2002-1939
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359188
|
5.0 |
MEDIUM
|
jacob_navia
|
lcc-win32
|
LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it h…
|
NVD-CWE-Other
|
CVE-2002-1940
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359189
|
5.0 |
MEDIUM
|
radiobird_software
|
web_server_4_everyone
|
Buffer overflow in RadioBird WebServer 4 Everyone 1.28 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request with the Host header set.
|
NVD-CWE-Other
|
CVE-2002-1941
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359190
|
5.0 |
MEDIUM
|
imatix
|
xitami
|
Imatix Xitami 2.5 b5 does not properly terminate certain Keep-Alive connections that have been broken or closed early, which allows remote attackers to cause a denial of service (crash) via a large n…
|
NVD-CWE-Other
|
CVE-2002-1942
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359191
|
5.0 |
MEDIUM
|
safetp
|
safetp_server
|
SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.
|
NVD-CWE-Other
|
CVE-2002-1943
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359192
|
5.0 |
MEDIUM
|
motorola
|
surfboard
|
Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap.
|
NVD-CWE-Other
|
CVE-2002-1944
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359193
|
5.0 |
MEDIUM
|
virtualzone
|
smartmail_server
|
Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long request to (1) TCP port 25 (SMTP) or (2) TCP port 110 (POP3).
|
NVD-CWE-Other
|
CVE-2002-1945
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359194
|
6.4 |
MEDIUM
|
webmin
|
webmin
|
Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.
|
NVD-CWE-Other
|
CVE-2002-1947
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359195
|
7.2 |
HIGH
|
gringotts
|
gringotts
|
Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2002-1948
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359196
|
4.3 |
MEDIUM
|
phprank
|
phprank
|
Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) the email parameter of add.php or (2) the banner URL (banurl paramet…
|
NVD-CWE-Other
|
CVE-2002-1950
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359197
|
7.5 |
HIGH
|
phprank
|
phprank
|
phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occu…
|
NVD-CWE-Other
|
CVE-2002-1952
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359198
|
5.0 |
MEDIUM
|
aol
|
instant_messenger
|
Heap-based buffer overflow in the goim handler of AOL Instant Messenger (AIM) 4.4 through 4.8.2616 allows remote attackers to cause a denial of service (crash) via escaping of the screen name paramet…
|
NVD-CWE-Other
|
CVE-2002-1953
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359199
|
4.3 |
MEDIUM
|
php
|
php
|
Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the query string argument, as demonstrated using soinf…
|
NVD-CWE-Other
|
CVE-2002-1954
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
359200
|
5.0 |
MEDIUM
|
iomega
|
nas
|
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack.
|
NVD-CWE-Other
|
CVE-2002-1955
|
2008-09-6 05:31 |
2002-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
