CVE-2006-4497

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-4497

CVE-2006-4497 describes an SQL injection in comments.php of IwebNegar 1.1 reachable via the id parameter. The vulnerability allows remote attackers to manipulate SQL commands, potentially impacting data confidentiality, integrity, and availability as indicated by the CVSS metrics (NVD: AV:N/AC:L/...

CVE-2006-4497

SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

IwebNegar 1.1 - comments.php SQL Injection

IwebNegar 1.1 - comments.php SQL Injection source: https://www.securityfocus.com/bid/19757/info IwebNegar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2006-08 Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability Release Date: 2006-08-25 CVE ID: CVE-2006-3869 http://www.nsfocus.com/english/homepage/research/0608.htm Affected systems & software =================== Internet Explorer 6 SP1 with MS06-042 -...

CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compressi...

CVE-2006-4296

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component combabackup for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfigabsolutepath parameter...

CVE-2006-3869

Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060824, allows remote attackers to cause a denial of service crash or execute arbitrary code via a long URL on a website that uses HTTP 1.1 compressi...

CVE-2006-4296

CVE-2006-4296 is a PHP remote file inclusion vulnerability in Mambo 1.1, specifically within the bigAPE-Backup component (com_babackup) and its Tar.php. The root cause is that the mosConfig_absolute_path parameter can be used by an attacker to include arbitrary files, enabling remote code inclusi...

CVE-2006-3869

CVE-2006-3869 affects Internet Explorer 6 SP1 on Windows 2000/XP SP1, where a heap-based buffer overflow in URLMON.DLL occurs when processing long URLs over HTTP/1.1 with compression. The flaw, tied to the MS06-042 update (pre-20060824), can lead to denial of service or remote code execution. Rem...

Microsoft Security Advisory (923762) Microsoft Security Advisory (923762): Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit

Microsoft Security Advisory 923762 Microsoft Security Advisory 923762: Long URLs to sites using HTTP 1.1 and compression Could Cause Internet Explorer 6 Service Pack 1 to Unexpectedly Exit Published: August 22, 2006 On August 15, 2006 Microsoft announced that it would be re-releasing MS06-042...

Microsoft Internet Explorer long URL buffer overflow

Overview Microsoft Internet Explorer is vulnerable to a buffer overflow when processing a long URL on a web site that uses HTTP 1.1 compression. This could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft Internet Explorer 6 Service...

CVE-2006-4281

PHP remote file inclusion vulnerability in akocomments.php in AkoComment 1.1 module comakocomment for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Wheatblog 1.1 - session.php Remote File Inclusion

Wheatblog 1.1 - session.php Remote File Inclusion Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll db != 'resource' touchDatabaseSession; Proof of Concept: server/includes/session.php?wbclassdir=SHELL Contact : [email protected] milw0rm.com...

CVE-2006-4061

PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repparrapportracine parameter. NOTE: this issue has been disputed by third party researchers, stating...

CVE-2006-4061

PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repparrapportracine parameter. NOTE: this issue has been disputed by third party researchers, stating...

CVE-2006-4060

CVE-2006-4060 : PHP remote file inclusion in calendar.php of Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter. The vulnerability affects Visual Events Calendar 1.1; exploitation would arise from an attacker-supplied URL in cfg_dir...

CVE-2006-4060

PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfgdir parameter...

CVE-2006-4061

CVE-2006-4061 describes a PHP remote file inclusion in phpPrintAnalyzer 1.1 (index.php) exploitable when register_globals is enabled, by passing a URL in rep_par_rapport_racine. The vulnerability is tied to a PHP RFI via a parameter; impact is described as partial confidentiality, integrity and a...

PT-2006-4905 · Php · Phpprintanalyzer

Name of the Vulnerable Software and Affected Versions: phpPrintAnalyzer version 1.1 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via a URL in the rep par rapport racine parameter...