CVE List

Id CVE No. Status Description Phase Votes Comments Actions
12880  CVE-2005-1674  Candidate  Cross-Site Request Forgery (CSRF) vulnerability in Help Center Live allows remote attackers to perform actions as the administrator via a link or IMG tag to view.php.  Assigned (20050519)  None (candidate not yet proposed)    View
8027  CVE-2003-1203  Candidate  Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter.  Assigned (20050519)  None (candidate not yet proposed)    View
8028  CVE-2003-1204  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via (1) the link parameter in sectionswindow.php, the directory parameter in (2) gallery.php, (3) navigation.php, or (4) uploadimage.php, the path parameter in (5) view.php, (6) the choice parameter in upload.php, (7) the sitename parameter in mambosimple.php, (8) the type parameter in upload.php, or the id parameter in (9) emailarticle.php, (10) emailfaq.php, or (11) emailnews.php.  Assigned (20050519)  None (candidate not yet proposed)    View
8029  CVE-2003-1205  Candidate  Crob FTP Server 2.60.1 allows remote authenticated users to cause a denial of service (crash) by renaming a file to the "con" MS-DOS device name.  Assigned (20050519)  None (candidate not yet proposed)    View
8030  CVE-2003-1206  Candidate  Format string vulnerability in Crob FTP Server 2.60.1 allows remote attackers to cause a denial of service (crash) via "%s" or "%n" sequences in (1) the username during login, or other FTP commands such as (2) dir.  Assigned (20050519)  None (candidate not yet proposed)    View

Page 1592 of 20943, showing 5 records out of 104715 total, starting on record 7956, ending on 7960

Actions