CVE Notifier

CVE-2002-0664 CWE-? N/A

CVE-2002-0664

The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify impor…

MITRE n/a:n/a 10 Sep 2002

CVE-2002-1089 CWE-? N/A

CVE-2002-1089

rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1087 CWE-? N/A

CVE-2002-1087

The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direc…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1086 CWE-? N/A

CVE-2002-1086

Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1085 CWE-? N/A

CVE-2002-1085

Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1084 CWE-? N/A

CVE-2002-1084

The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST r…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1083 CWE-? N/A

CVE-2002-1083

Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories …

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1082 CWE-? N/A

CVE-2002-1082

The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1080 CWE-? N/A

CVE-2002-1080

The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl…

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1078 CWE-? N/A

CVE-2002-1078

Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1077 CWE-? N/A

CVE-2002-1077

IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.

MITRE n/a:n/a 31 Aug 2002

CVE-2002-1075 CWE-? N/A

CVE-2002-1075

Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.

MITRE n/a:n/a 31 Aug 2002