Bernhard Mueller

The issue allows remote attackers to read arbitrary files. This is achieved by using a (four backslashes) in the `fileName` parameter to the getRdsLogFile endpoint.

The issue allows remote attackers to bypass rules and deliver arbitrary POST data to a PHP application via a multipart request where an invalid part precedes the crafted data. This can be achieved by sending a specially crafted request.

The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending an M-POST request to a long "http://example.com/CIMListener/" URI with a long consumer name, such as a long `consumer name` variable.

The issue allows remote attackers to delete arbitrary files via a full pathname in the argument to the `FileDelete` method. This is due to an absolute path traversal vulnerability in the WebCacheCleaner ActiveX control.

The issue allows remote attackers to execute arbitrary code via a long Unicode property value in several parameters, including `serverAddress`, `sessionId`, `clientIPLower`, `clientIPHigher`, `userName`, `domainName`, or `dnsSuffix`.

The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTPS URL to an SSL protected web page. This is due to improper handling by the `fetch` function in the ` httpsrequest` function.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `image` parameter in a "GetPic" operation.

The issue allows remote attackers to cause a denial of service, potentially leading to the execution of arbitrary code, via a web page with embedded CLSIDs referencing certain COM objects. This results in memory corruption due to the instantiation of these COM objects, including those from various DLL files such as `devenum.dll`, `diactfrm.dll`, `wmm2filt.dll`, `fsusd.dll`, `dmdskmgr.dll`, `browsewm.dll`, `browseui.dll`, `shell32.dll`, `mshtml.dll`, `inetcfg.dll`, `infosoft.dll`, `query.dll`, `syncui.dll`, `clbcatex.dll`, `clbcatq.dll`, `comsvcs.dll`, and `msconf.dll`.

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01 SP4 through 6 Description: The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, and may also enable the execution of arbitrary code. This can be achieved through a web page containing embedded CLSIDs that reference specific COM objects not classified as ActiveX controls. An example of exploitation involves the use of the JVIEW Profiler (Javaprxy.dll). Recommendations: For Internet Explorer versions 5.01 SP4 through 6, consider disabling the use of COM objects that are not ActiveX controls as a temporary mitigation measure until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A directory traversal issue exists, allowing remote attackers to read or include arbitrary files. This can be achieved by using a .. (dot dot) in the `language` parameter to "parser.php".

The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerable parameters are `search row`, `sort row`, `order`, and `perpage`.