267351
|
- |
|
basilix
|
basilix_webmail
|
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
|
NVD-CWE-Other
|
CVE-2002-1711
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267352
|
- |
|
ssh
|
ssh ssh2
|
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to …
|
NVD-CWE-Other
|
CVE-2002-1715
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267353
|
- |
|
bavo
|
bavo
|
Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
|
NVD-CWE-Other
|
CVE-2002-1719
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267354
|
- |
|
outfront
|
spooky_login
|
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
|
NVD-CWE-Other
|
CVE-2002-1720
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267355
|
- |
|
logitech
|
cordless_freedom_itouch_keyboard cordless_itouch_keyboard itouch_keyboard
|
Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button.
|
NVD-CWE-Other
|
CVE-2002-1722
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267356
|
- |
|
powerboards
|
powerboards
|
Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the erro…
|
NVD-CWE-Other
|
CVE-2002-1723
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267357
|
- |
|
onlinetools.org
|
phpimageview
|
Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter.
|
NVD-CWE-Other
|
CVE-2002-1724
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267358
|
- |
|
onlinetools.org
|
phpimageview
|
phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
|
NVD-CWE-Other
|
CVE-2002-1725
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267359
|
- |
|
brokenbytes
|
photodb
|
secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter tha…
|
NVD-CWE-Other
|
CVE-2002-1726
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267360
|
- |
|
asksam_systems
|
asksam_web_publisher
|
Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.
|
NVD-CWE-Other
|
CVE-2002-1727
|
2017-07-11 10:29 |
2002-12-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|