morpheus[bd]

3 exploits Active since Dec 1999
CVE-2004-0725 EXPLOITDB text WRITEUP
Moodle 1.3.2 and 1.4 dev - Cross-Site Scripting via help.php file Parameter
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVE-2000-0037 EXPLOITDB c WORKING POC
Majordomo wrapper - Privilege Escalation
Majordomo wrapper allows local users to gain privileges by specifying an alternate configuration file.
CVE-2000-0944 EXPLOITDB CRITICAL c WORKING POC
CGI Script Center News Update 1.1 - Info Disclosure
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
CVSS 9.8