CVE Notifier

CVE-2002-0591 CWE-? N/A

CVE-2002-0591

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute th…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0590 CWE-? N/A

CVE-2002-0590

Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the (1) title or (2) body of posts.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0589 CWE-? N/A

CVE-2002-0589

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0588 CWE-? N/A

CVE-2002-0588

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0587 CWE-? N/A

CVE-2002-0587

Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0586 CWE-? N/A

CVE-2002-0586

Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice …

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0585 CWE-? N/A

CVE-2002-0585

Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0584 CWE-? N/A

CVE-2002-0584

WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0583 CWE-? N/A

CVE-2002-0583

WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force att…

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0582 CWE-? N/A

CVE-2002-0582

WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0581 CWE-? N/A

CVE-2002-0581

WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.

MITRE n/a:n/a 11 Jun 2002

CVE-2002-0580 CWE-? N/A

CVE-2002-0580

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guess…

MITRE n/a:n/a 11 Jun 2002