Show filters
79 Total Results
Displaying 61-70 of 79
Sort by:
Attacker Value
Unknown
CVE-2005-1657
Disclosure Date: May 18, 2005 (last updated February 22, 2025)
Multiple directory traversal vulnerabilities in Mercur Messaging 2005 SP2 allow remote attackers to perform unauthorized file operations via the Folder.Id parameter to (1) deletefolder.ctml, (2) deletemessage.ctml, (3) origmessage.ctml, or (4) readmessage.ctml, the Message.Id parameter to editmessage.ctml, or the (5) Message.Command parameter to messages.ctml.
0
Attacker Value
Unknown
CVE-2005-0460
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
index.php in MercuryBoard 1.0.x and 1.1.x allows remote attackers to obtain sensitive information by setting the debug parameter.
0
Attacker Value
Unknown
CVE-2005-0662
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the Avatar field.
0
Attacker Value
Unknown
CVE-2005-0663
Disclosure Date: May 02, 2005 (last updated February 22, 2025)
SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.
0
Attacker Value
Unknown
CVE-2005-0414
Disclosure Date: April 27, 2005 (last updated February 22, 2025)
SQL injection vulnerability in post.php for MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via a reply post action for index.php with (1) the t parameter or (2) the qu parameter.
0
Attacker Value
Unknown
CVE-2005-0878
Disclosure Date: March 23, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).
0
Attacker Value
Unknown
CVE-2005-0462
Disclosure Date: February 17, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in MercuryBoard 1.0.x and 1.1.x allows remote attackers to inject arbitrary HTML and web script via the f parameter.
0
Attacker Value
Unknown
CVE-2005-0306
Disclosure Date: January 25, 2005 (last updated February 22, 2025)
MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message.
0
Attacker Value
Unknown
CVE-2005-0307
Disclosure Date: January 25, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters.
0
Attacker Value
Unknown
CVE-2004-1211
Disclosure Date: January 10, 2005 (last updated February 22, 2025)
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.
0
