CVE-2007-0571: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/lib/libhead.php in phpMyReports 3.0.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfgPathModule parameter...

CVE-2007-0568: Undefined Security Weakness

PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the glroot parameter...

CVE-2007-0508: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote attackers to execute arbitrary PHP code via a URL in the BBCLANGUAGEPATH parameter...

PT-2007-1946 · Phpadsnew · Openads

Name of the Vulnerable Software and Affected Versions: Openads aka phpAdsNew version 2.0.7 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the 1 phpAds geoPlugin parameter to "libraries/lib-remotehost.inc", the 2 filename...

CVE-2007-0496: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion

Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

CVE-2006-6920: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving 1 lib/ADMIN.php and 2 lib/SKIN.php...

Debian DSA-1244-1 : xine-lib - buffer overflow

It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

xine-lib buffer overflow

Buffer overflow on parsing Real streaming protocol...

[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

DSA-1244-1 xine-lib

Bulletin has no description...

CVE-2006-6725: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 lib/htm2php.php and 2 sitetools/htm2php.php. NOTE: The provenance of this information is unknown; the details are obtained...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure PHPBuilder v0.0.2 Remote File Disclosure Vulnerability Download: http://sourceforge.net/project/downloading.php?groupname=phpbuilder&filename=phpbuilder-0.0.2.tgz&usemirror=switch Found By: the master exploit:...

CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

CVE-2006-6631: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6629: Undefined Security Weakness

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation PG Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings 1 dangerousMacros.pl, 2 PG.pl, or 3...

CVE-2006-6551: Undefined Security Weakness

PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crtTUCOWSdomains/lib/domainutils.inc.php in Tucows Client Code Suite CCS 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ENVTCAHOME parameter...

CVE-2006-6516: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 page parameter to a index.php3, or the 2 libpath parameter to b authenticate.inc.php3 or c lib/exifer/exif.php...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...