VendorsOnnuri Infotekactivepost_standard3.1
Vulnerabilities

Onnuri Infotek Activepost Standard 3.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2004-1547
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.
Published 2005-02-20 · Modified
5.0EPSS 0.021
CVE-2004-1548
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
Published 2005-02-20 · Modified
5.0EPSS 0.018
CVE-2004-1549
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
Published 2005-02-20 · Modified
5.0EPSS 0.016