2003

Directory traversal vulnerability in cgihtml 1.69 allows remote attackers to overwrite and create arbitrary files via a

IBM Net.Data allows remote attackers to obtain sensitive information such as path names, server names and possibly user

Sambar Server before 6.0 beta 6 allows remote attackers to obtain sensitive information via direct requests to the defau

Multiple race conditions in Linux-VServer 1.22 with Linux kernel 2.4.23 and SMP allow local users to cause a denial of s

BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, with RMI and anonymous admin lookup enabled, allows remote a

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbit

Easy File Sharing (EFS) Web Server 1.2 allows remote authenticated users to cause a denial of service via (1) an "empty

Easy File Sharing (EFS) Web Server 1.2 stores the (1) option.ini (aka options.ini) file and (2) log directory under the

Multiple directory traversal vulnerabilities in siteman.php3 in AnyPortal(php) 12 MAY 00 allow remote attackers to (1) c

Baby FTP Server (BabyFTP) 1.2, and possibly other versions before May 31, 2003, allows remote attackers to cause a denia

Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers,

The IMAP functionality in PHP before 4.3.1 allows remote attackers to cause a denial of service via an e-mail message wi

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows re

EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, wh

Microsoft Internet Explorer allows remote attackers to cause a denial of service (resource consumption) via a Javascript

mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' (quote) value in the lng parame

Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote att

Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows

Trend Micro Virus Control System (TVCS) 1.8 running with IIS allows remote attackers to cause a denial of service (memor

Trend Micro Virus Control System (TVCS) Log Collector allows remote attackers to obtain usernames, encrypted passwords,

Directory traversal vulnerability in s.dll in WebCollection Plus 5.00 allows remote attackers to view arbitrary files in

Directory traversal vulnerability in NITE ftp-server (NiteServer) 1.83 allows remote attackers to list arbitrary directo

Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%

Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows rem

The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including

clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the

CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under

Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a fil

TOPo 1.43 allows remote attackers to obtain sensitive information by sending an HTTP request with an invalid parameter t

Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows rem

Directory traversal vulnerability in Unreal Tournament Server 436 and earlier allows remote attackers to access known fi

BitchX 75p3 and 1.0c16 through 1.0c20cvs allows remote attackers to cause a denial of service (segmentation fault) via a

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator p

Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via

mod_survey 3.0.0 through 3.0.15-pre6 does not check whether a survey exists before creating a subdirectory for it, which

Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary

The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows r

Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute

Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains

Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request

upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the f

Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an H

Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (

Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denia

Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a ..

Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND re

cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, whi

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3)

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before