Show filters
129 Total Results
Displaying 121-129 of 129
Sort by:
Attacker Value
Unknown
CVE-2004-1994
Disclosure Date: May 05, 2004 (last updated February 22, 2025)
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.
0
Attacker Value
Unknown
CVE-2002-2166
Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script.
0
Attacker Value
Unknown
CVE-2002-0504
Disclosure Date: August 12, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
0
Attacker Value
Unknown
CVE-2002-0503
Disclosure Date: August 12, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter.
0
Attacker Value
Unknown
CVE-2002-0502
Disclosure Date: August 12, 2002 (last updated February 22, 2025)
Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.
0
Attacker Value
Unknown
CVE-2002-0301
Disclosure Date: May 31, 2002 (last updated February 22, 2025)
Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
0
Attacker Value
Unknown
CVE-2001-0848
Disclosure Date: December 06, 2001 (last updated February 22, 2025)
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.
0
Attacker Value
Unknown
CVE-2001-0760
Disclosure Date: October 18, 2001 (last updated February 22, 2025)
Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
0
Attacker Value
Unknown
CVE-1999-0759
Disclosure Date: September 13, 1999 (last updated February 22, 2025)
Buffer overflow in FuseMAIL POP service via long USER and PASS commands.
0
