Vulnerabilities (CVE)

Filtered by NVD-CWE-Other
Total 29997 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1203 1 Mambo 1 Mambo Site Server 2026-06-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter.
CVE-2003-1202 1 Omail 1 Omail Webmail 2026-06-16 10.0 HIGH N/A
The checklogin function in omail.pl for omail webmail 0.98.4 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) password, (2) domainname, or (3) username.
CVE-2003-1200 1 Alt-n 1 Mdaemon 2026-06-16 7.5 HIGH N/A
Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a long From parameter to Form2Raw.cgi.
CVE-2003-1199 1 Myproxy 1 Myproxy 2026-06-16 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVE-2003-1198 1 Cherokee 1 Cherokee Httpd 2026-06-16 5.0 MEDIUM N/A
connection.c in Cherokee web server before 0.4.6 allows remote attackers to cause a denial of service via an HTTP POST request without a Content-Length header field.
CVE-2003-1197 1 Ledscripts.com 1 Ledforums 2026-06-16 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the (1) top_message parameter or (2) topic field of a new thread.
CVE-2003-1196 1 Vienuke 1 Vieboard 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in viewtopic.asp in VieBoard 2.6 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVE-2003-1195 1 Vienuke 1 Vieboard 2026-06-16 7.5 HIGH N/A
SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable.
CVE-2003-1194 1 Booby 1 Booby 2026-06-16 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Booby .1 through 0.2.3 allows remote attackers to inject arbitrary web script or HTML via the error message.
CVE-2003-1193 1 Oracle 2 Application Server Portal, Oracle9i 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in the Portal DB (1) List of Values (LOVs), (2) Forms, (3) Hierarchy, and (4) XML components packages in Oracle Oracle9i Application Server 9.0.2.00 through 3.0.9.8.5 allow remote attackers to execute arbitrary SQL commands via the URL.
CVE-2003-1192 1 Truenorth Software 1 Ia Webmail Server 2026-06-16 10.0 HIGH N/A
Stack-based buffer overflow in IA WebMail Server 3.1.0 allows remote attackers to execute arbitrary code via a long GET request.
CVE-2003-1191 1 E107 1 E107 2026-06-16 5.0 MEDIUM N/A
chatbox.php in e107 0.554 and 0.603 allows remote attackers to cause a denial of service (pages fail to load) via HTML in the Name field, which prevents the main.php form from being loaded.
CVE-2003-1190 1 Phprecipebook 1 Phprecipebook 2026-06-16 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in PHPRecipeBook 1.24 through 2.17 allows remote attackers to inject arbitrary web script or HTML via a recipe.
CVE-2003-1189 1 Nokia 1 Ipso 2026-06-16 5.0 MEDIUM N/A
Unknown vulnerability in Nokia IPSO 3.7, configured as IP Clusters, allows remote attackers to cause a denial of service via unknown attack vectors.
CVE-2003-1188 1 Unichat 1 Unichat 2026-06-16 5.0 MEDIUM N/A
Unichat allows remote attackers to cause a denial of service (crash) by adding extra chat characters (avatars) and logging in to a chat room, as demonstrated using duplicate ACTOR entries in u2res000.rit.
CVE-2003-1187 1 Phpkit 1 Phpkit 2026-06-16 6.8 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in include.php in PHPKIT 1.6.02 and 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the contact_email parameter.
CVE-2003-1186 1 Telcondex 1 Simplewebserver 2026-06-16 7.5 HIGH N/A
Buffer overflow in TelCondex SimpleWebServer 2.12.30210 Build3285 allows remote attackers to execute arbitrary code via a long HTTP Referer header.
CVE-2003-1185 1 Thwboard 1 Thwboard 2026-06-16 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in ThWboard before Beta 2.8.2 allow remote attackers to inject arbitrary SQL commands via various vectors including (1) Admin-Center, (2) Announcements, (3) admin/calendar.php, and (4) showevent.php.
CVE-2003-1184 1 Thwboard 1 Thwboard 2026-06-16 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in ThWboard Beta 2.8 and 2.81 allow remote attackers to inject arbitrary web script or HTML via (1) time in board.php, (2) the profile Homepage-Feld, (3) pictures, and (4) other "Diverse XSS Bugs."
CVE-2003-1183 1 Oracle 1 Oracle Files 2026-06-16 4.6 MEDIUM N/A
The WebCache component in Oracle Files 9.0.3.1.0, 9.0.3.2.0, and 9.0.3.3.0 of Oracle Collaboration Suite Release 1 caches files despite the cacheability rules imposed by Oracle Files, which allows local users to gain access.