Vulnerabilidades

password.asp en Snitz Forums 3.4.03 y anteriores permite a atacantes remotos reestablecer contraseñas y ganar privilegios de otros usuarios mediante una petición directa a password.asp con un identificador (id) de miembro modificado.

Vulnerabilidad de secuencias de comandos (XSS) en search.asp de Snitz Forums 3.4.03 y anteriores permite a atacantes remotos ejecutar script web arbitrario mediante el parámetro Search.

Vulnerabilidad de inyección de SQL en Snitz Forums 2000 anteriores a la 3.3.03 permite que atacantes remotos ejecuten procedimientos almacenados arbitrarios mediante la variable Email.

Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL.

SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.

The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.

Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.

Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.

Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.

members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.

Vulnerabilidad de atravesamiento de directorios en eshare Expressions 4 Web server permite a atacantes remotos leer ficheros arbitrarios mediante un .. (punto punto) en la petición HTTP.

keyinit in S/Key does not require authentication to initialize a one-time password sequence, which allows an attacker who has gained privileges to a user account to create new one-time passwords for use in other activities that may use S/Key authentication, such as sudo.

Buffer overflow in WebBBS 1.15 allows remote attackers to execute arbitrary commands via a long HTTP GET request.

Buffer overflow in Skyfull mail server via MAIL FROM command.

Vulnerability in CGI program in the Lasso application by Blue World, as used on WebSTAR and other servers, allows remote attackers to read arbitrary files.

List of arbitrary files on Web host via nph-test-cgi script.