20 matches found
CVE-2026-79313
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session management relies on periodic cleanup to expire sessions instead of checking the last-access time when a session is loaded. As a result, an expired session whose record has not yet been cleaned up can...
EUVD-2009-0518
Malware in sbrugna...
EUVD-2002-1211
Malware in sbrugna...
[ASA-202107-37] putty: content spoofing
Arch Linux Security Advisory ASA-202107-37 ========================================== Severity: Low Date : 2021-07-20 CVE-ID : CVE-2021-36367 Package : putty Type : content spoofing Remote : Yes Link : https://security.archlinux.org/AVG-2143 Summary ======= The package putty before version 0.76-1...
Pigalle Version 0.76 Alpha Remote File Inclusion Vulnerability
Exploit for php platform in category web applications ============================================================== Pigalle Version 0.76 Alpha Remote File Inclusion Vulnerability ============================================================== + : Exploit Title : Pigalle Version 0.76 Alpha Remote...
CVE-2009-0513
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to 1 admin/doc/index.php, 2 index.php, and 3 base/menu.php in mod/...
Directory traversal
Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...
CVE-2009-0513
Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to 1 admin/doc/index.php, 2 index.php, and 3 base/menu.php in mod/...
CVE-2009-0514
CVE-2009-0514 affects WebFrame 0.76 with directory traversal in mod/index.php (parameters: currentmod, LANG). Exploitation enables remote inclusion and execution of arbitrary local files. Base CVSS 2.0 score 7.5 (HIGH); attack vector NETWORK, no authentication required. No remediation details pro...
webframe 0.76 Multiple File Inclusion Vulnerabilities
No description provided by source. ------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...
webframe 0.76 Multiple File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ===================================================== webframe 0.76 Multiple File Inclusion Vulnerabilities ===================================================== ------------------Rfi/Lfi------------------ script:webframe 0.76...
webframe 0.76 - Multiple File Inclusions
------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...
Webframe 0.76 Remote And Local File Inclusion
------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...
webframe 0.76 - Multiple File Inclusions
webframe 0.76 - Multiple File Inclusions ------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...
Remote file inclusion
PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
CVE-2007-1766
PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...
CVE-2007-1766
CVE-2007-1766 concerns a PHP remote file inclusion in Advanced Login 0.76 and earlier. The vulnerability resides in login/engine/db/profiledit.php, where an attacker can inject a URL via the root parameter to execute arbitrary PHP code remotely. The issue yields full compromise of confidentiality...
PostNuke 0.75/0.76 DL - 'viewdownload.php' SQL Injection
source: https://www.securityfocus.com/bid/14636/info PostNuke is prone to an SQL injection vulnerability. This issue is due to a lack of sufficient sanitization of user-supplied input. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or...
CVE-2002-1227
PAM 0.76 treats a disabled password as if it were an empty null password, which allows local and remote attackers to gain privileges as disabled users...
Gaim contains a buffer overflow vulnerability in the http_canread() function
Overview There is a buffer overflow vulnerability in the Gaim httpcanread function, which could allow an unauthenticated, remote attacker to execute arbitrary code. Description Gaim is a multi-protocol instant messenger available for a number of operating systems. It provides a feature that allow...