cve.bz

onnuri infotek activepost standard vulnerabilities, newest first

Filter
  1. –CVE-2004-2616EPSS 1.2%

    The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message.

  2. –CVE-2004-1549EPSS 1.6%

    The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.

  3. –CVE-2004-1548EPSS 1.8%

    Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.

  4. –CVE-2004-1547EPSS 2.1%

    The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.