372 matches found
PT-2006-7480 · Unknown · Phpirc Bot
Name of the Vulnerable Software and Affected Versions: PHPIrc bot version 0.2 Description: A remote file inclusion issue in the php4you.php file allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. Recommendations: For PHPIrc bot version 0.2, consider validating a...
Songbird Media Player 0.2 - Format String Denial of Service (PoC)
Songbird Media Player 0.2 - Format String Denial of Service PoC / ======================================================================== 0-day Songbird Media Player November 2006 - Month Of Greg's Media Player Expl...
[x0n3-h4ck]Drake CMS v 0.2 XSS exploit
-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=-----------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bug typ...
CVE-2006-4237
CVE-2006-4237 affects Invisionix Roaming System Remote (IRSR) up to version 0.2 and earlier, where pageheaderdefault.inc.php is vulnerable to a PHP remote file inclusion via the _sysSessionPath parameter, enabling remote code execution. Affected component/file: pageheaderdefault.inc.php. Root cau...
Sonium Enterprise Adressbook Version 0.2 (folder) RFI
+-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.htm +...
Sonium Enterprise Adressbook 0.2 - folder Include
Sonium Enterprise Adressbook 0.2 - folder Include +-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.ht...
CVE-2006-4038
The CVE-2006-4038 entry applies to GaesteChaos before and including 0.2, where the web application eintragen.php is vulnerable to cross-site scripting. The underlying issue is input handling for the gastname and gastwohnort parameters, which can be crafted to inject arbitrary web script/HTML. The...
[Full-disclosure] GaesteChaos <= 0.2 Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: GaesteChaos = 0.2 Multiple Vulnerabilities Release Date: 2006/08/04 Last Modified: 2006/08/03 Author: Tamriel tamriel at gmx dot net Application: GaesteChaos = 0.2 Risk: Moderate Vendor Status: not contacted Vendor Site: www.chaossoft.de...
CVE-2006-3191
Cross-site scripting XSS vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2006-3191
CVE-2006-3191 describes a Cross-site Scripting (XSS) vulnerability in MPCS 0.2, specifically in comment.php, exploitable via the pageid parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The available sources confirm the affected software (MPCS 0.2) and the vulne...
CVE-2006-3191
Cross-site scripting XSS vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web script or HTML via the pageid parameter...
CVE-2006-2555
The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...
Design/Logic Flaw
The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...
CVE-2006-2554
The vulnerability CVE-2006-2554 is a buffer overflow in the tell_player_surr_changes function of Genecys 0.2 and earlier . The root cause is unchecked/overly long input arguments that can allow remote attackers to execute arbitrary code. Documented impact is remote code execution without user int...
CVE-2006-2555
The parsecommand function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service crash via a command with a missing ":" colon separator, which triggers a null dereference...
CVE-2006-2555
The CVE-2006-2555 issue affects Genecys 0.2 and earlier. The parse_command function can trigger a null dereference and remote denial of service when a command is sent without a ":" separator. The available sources describe the vulnerability and impact (crash) but do not provide exploitation code ...
Genecys <= 0.2 (BoF/NULL pointer) Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================================== Genecys = 0.2 BoF/NULL pointer Denial of Service Exploit =========================================================== http://www.inj3ct0r.com/sploits/6146.zip 0day.today 2018-02-19...
Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)
Genecys = 0.2 BoF/NULL pointer Denial of Service Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1783.zip 05132006-genecysbof.zip milw0rm.com 2006-05-14...
Genecys 0.2 - Buffer Overflow NULL Pointer (Denial of Service)
Genecys 0.2 - Buffer Overflow NULL Pointer Denial of Service Genecys = 0.2 BoF/NULL pointer Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1783.zip 05132006-genecysbof.zip milw0rm.com 2006-05-14...