| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-1086 | 7.5 | Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1085 | 7.5 | Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1084 | 6.4 | The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1083 | 5.0 | Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1082 | 5.0 | The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1081 | 5.0 | The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1080 | 7.5 | The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvpara | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1079 | 5.0 | Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1078 | 5.0 | Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| CVE-2002-1077 | 5.0 | IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field. | 2008-09-05 20:29:00 | 2002-10-04 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: