Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2004-0374
Disclosure Date: May 04, 2004 (last updated February 22, 2025)
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
0
Attacker Value
Unknown
CVE-2003-1138
Disclosure Date: October 27, 2003 (last updated February 22, 2025)
The default configuration of Apache 2.0.40, as shipped with Red Hat Linux 9.0, allows remote attackers to list directory contents, even if auto indexing is turned off and there is a default web page configured, via a GET request containing a double slash (//).
0
Attacker Value
Unknown
CVE-2002-0874
Disclosure Date: September 05, 2002 (last updated February 22, 2025)
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.
0
Attacker Value
Unknown
CVE-2001-0372
Disclosure Date: June 18, 2001 (last updated February 22, 2025)
Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attacker to gain administrative access via the demo stores (1) barry, (2) basic, or (3) construct.
0
Attacker Value
Unknown
CVE-2001-0097
Disclosure Date: February 12, 2001 (last updated February 22, 2025)
The Web interface for Infinite Interchange 3.6.1 allows remote attackers to cause a denial of service (application crash) via a large POST request.
0
