CVE-2007-5053: Improper Control of Generation of Code

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

CVE-2004-2686

Vulnerability CVE-2004-2686 affects the Solaris kernel (versions 2.6, 7, 8, 9) in the vfs_getvfssw function. It describes a directory traversal that allows local users to load arbitrary kernel modules via crafted mount or sysfs system calls, enabling privilege escalation. The note mentions it mig...

CVE-2004-2686: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the vfsgetvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted 1 mount or 2 sysfs system calls. NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure...

CVE-2007-4942: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4818

Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 addons/plugin.php, 2 addons/sidebar.php, 3 mail/index.php, or 4 mail/mailbox.php in modules/...

CVE-2007-4818

CVE-2007-4818 concerns multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 . The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the doc_root parameter to particular module files: (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, and...

CVE-2007-4807: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...

Design/Logic Flaw

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4789

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4788

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

Code injection

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4789

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4789: Undefined Security Weakness

Cisco Content Switching Modules CSM 4.2 before 4.2.7, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.6, when service termination is enabled, allow remote attackers to cause a denial of service reboot via unspecified vectors related to high network utilization, aka CSCsh57876...

CVE-2007-4788: Undefined Security Weakness

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

Txx CMS 0.2 - Multiple Remote File Inclusions

Txx CMS 0.2 - Multiple Remote File Inclusions :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || |||...

Txx CMS 0.2 - Multiple Remote File Inclusions

:::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...

CVE-2007-4650

Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to 1 rename items, 2 read and modify item properties, or 3 lock and replace items via unknown vectors in a the WebDAV module; and 4 edit unspecified data files using "linked items" in WebDAV and b Reupload modules...