| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2001-1526 | 4.3 | Cross-site scripting (XSS) vulnerability in the comments action in index.php in easyNews 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the zeit parameter. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1525 | 5.0 | Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1523 | 4.3 | Cross-site scripting (XSS) vulnerability in the DMOZGateway module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the topic parameter. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1522 | 4.3 | Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1520 | 2.1 | Xircom REX 6000 allows local users to obtain the 10 digit PIN by starting a serial monitor, connecting to the personal digital assistant (PDA) via Rextools, and capturing the cleartext PIN. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1516 | 4.3 | Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews. | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1514 | 10.0 | ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProce | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1511 | 5.0 | JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read arbitrary JavaServer Pages (JSP) source code via a request URL containing the source filename ending in (1) "jsp%00" or (2) "js%2570". | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1510 | 5.0 | Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS), and possibly other web servers allows remote attackers to read arbitrary files and directories by appending (1) "%3f.jsp", (2) "?.jsp" or (3) "?" to t | 2008-09-05 20:26:00 | 2001-12-31 05:00:00 |
| CVE-2001-1225 | 2.1 | Hughes Technology Mini SQL 2.0.10 through 2.0.12 allows local users to cause a denial of service by creating a very large array in a table, which causes miniSQL to crash when the table is queried. | 2008-09-05 20:26:00 | 2001-12-26 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39953
Zapisa po stranici: