Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command. Date published : 2005-02-19 http://www.securityfocus.com/bid/11675 http://marc.info/?l=bugtraq&m=110037283803560&w=2
SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation....
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter. Date published : 2005-02-19 http://www.securityfocus.com/bid/11660 http://marc.info/?l=bugtraq&m=110021385926870&w=2
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions. Date published : 2005-02-19 http://www.securityfocus.com/bid/11662 http://marc.info/?l=bugtraq&m=110020607924001&w=2
CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module. Date...
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php. Date published : 2005-02-19 http://marc.info/?l=bugtraq&m=110019198507100&w=2
04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2. Date published : 2005-02-19 http://www.securityfocus.com/bid/11652 http://marc.info/?l=bugtraq&m=110012542615484&w=2
04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries. Date published :...
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error...
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window. Date published : 2005-02-19...
WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php. Date published : 2005-02-19 http://www.securityfocus.com/bid/11651 http://marc.info/?l=bugtraq&m=110011618724455&w=2
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message. Date published : 2005-02-19 http://www.securityfocus.com/bid/11651 http://marc.info/?l=bugtraq&m=110011618724455&w=2
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter. Date published : 2005-02-19 http://www.securityfocus.com/bid/11651 http://marc.info/?l=bugtraq&m=110011618724455&w=2
CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server. Date published...