| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2002-0589 | 7.5 | PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0588 | 5.0 | PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0587 | 7.5 | Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0586 | 7.5 | Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0584 | 5.0 | WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0583 | 5.0 | WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0582 | 5.0 | WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0581 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0580 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| CVE-2002-0579 | 7.5 | WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password. | 2008-09-05 20:28:00 | 2002-06-18 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/40089
Zapisa po stranici: