8065 matches found
CVE-2006-5511: Undefined Security Weakness
Direct static code injection vulnerability in delete.php in JaxUltraBB JUBB 2.0, when registerglobals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter...
SETI@home Clients Buffer Overflow Exploit
No description provided by source. / Seti@Home exploit by zillionatsafemode.org 2003/01/07 Credits for the vulnerability go to: SkyLined [email protected] http://spoor12.edup.tudelft.nl/SkyLined%20v4.2/?Advisories/Seti@home Use this exploit in combination with a DNS spoofing utility such a...
CVE-2006-5432: Undefined Security Weakness
Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when registerglobals is enabled, allow remote attackers to create or overwrite arbitrary files via the 1 emailto, 2 emailfrom, 3 nameto, 4 namefrom, 5 picture, 6 comment, or 7 sessionID parameter, as...
CVE-2006-5191
PHP remote file inclusion vulnerability in includes/functionsstatictopics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
GLSA-200610-03 : ncompress: Buffer Underflow
The remote host is affected by the vulnerability described in GLSA-200610-03 ncompress: Buffer Underflow Tavis Ormandy of the Google Security Team discovered a static buffer underflow in ncompress. Impact : An attacker could create a specially crafted LZW archive, that when decompressed by a user...
CVE-2006-5191
PHP remote file inclusion vulnerability in includes/functionsstatictopics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5191
The CVE-2006-5191 issue affects phpBB with the Nivisec Static Topics module (version 1.0 and earlier). A Remote File Inclusion flaw in includes/functions_static_topics.php allows an attacker to supply a URL via the phpbb_root_path parameter to execute arbitrary PHP code on affected servers. This ...
CVE-2006-5191: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/functionsstatictopics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
phpBB Static Topics <= 1.0 [phpbb_root_path] Remote File Include Vulnerability
--------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...
phpBB Static Topics 1.0 - 'phpbb_root_path' File Inclusion
--------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net :...
phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability
No description provided by source. --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Securi...
phpBB Static Topics 1.0 - phpbb_root_path File Inclusion
phpBB Static Topics 1.0 - phpbbrootpath File Inclusion --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By...
phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= phpBB Static Topics = 1.0 phpbbrootpath File Include Vulnerability =======================================================================...
CVE-2006-5131
module/shout/jafshout.php aka the shoutbox in ph03y3nk just another flat file JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by "", possibly due to a static code injection vulnerability involving admin/datainc.php...
CVE-2006-5131: Undefined Security Weakness
module/shout/jafshout.php aka the shoutbox in ph03y3nk just another flat file JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by " ", possibly due to a static code injection vulnerability involving admin/datainc.php...
CVE-2006-5085
CVE-2006-5085 affects Blog Pixel Motion 2.1.1. The vulnerability is a static code injection in config.php where the nom_blog parameter is injected into include/variables.php, enabling remote attackers to execute arbitrary PHP code. The available connected documents confirm the affected software v...
CVE-2006-5085: Undefined Security Weakness
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...
CVE-2006-4979: Undefined Security Weakness
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings...
CVE-2006-4768
Multiple direct static code injection vulnerabilities in addgo.php in Stefan Ernst Newsscript aka WM-News 0.5 beta allow remote attackers to execute arbitrary PHP code via the 1 description, 2 issue, 3 title, 4 var, 5 name, 6 keywords, and 7 note parameters, which are stored in an article file...
