749 matches found
CVE-2007-3683
SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topicid parameter...
CVE-2007-3683
SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the topicid parameter...
CVE-2007-3683
CVE-2007-3683 affects Aigaion 1.3.3 and earlier, with SQL injection in pagetopic.php via topic_id. This allows remote attackers to execute arbitrary SQL commands. Affected component: pagetopic.php; root cause: unauthenticated input not sanitized. Impact is partial confidentiality, integrity, and ...
Aigaion 1.3.3 - topic topic_id SQL Injection
Aigaion 1.3.3 - topic topicid SQL Injection --==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 ordnertiefe parameter to siteconf.php; or the 2 ttdocroot parameter to a class.csv.php, b produktenachserie.php, or c refkdrubrik.php in functionen/; ...
CVE-2007-2597
Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 ordnertiefe parameter to siteconf.php; or the 2 ttdocroot parameter to a class.csv.php, b produktenachserie.php, or c refkdrubrik.php in functionen/; ...
CVE-2007-2597
CVE-2007-2597 : Multiple PHP remote file inclusion vulnerabilities affect telltarget CMS 1.3.3. An attacker can trigger arbitrary PHP code execution by providing a URL in the parameters (1) ordnertiefe to site_conf.php or (2) tt_docroot to several scripts across functionen/, module/, and standard...
telltarget <= 1.3.3 (tt_docroot) Remote File Inclusion Vulnerabilities
No description provided by source. telltarget CMS 1.3.3 = Multiple Remote File Inclusion Vulnerabilitie D.Script: http://www.telltargetcms.de/download/telltarget1.3.3.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/phplib/siteconf.php?ordnertiefe=Shell...
telltarget <= 1.3.3 (tt_docroot) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== telltarget = 1.3.3 ttdocroot Remote File Inclusion Vulnerabilities ====================================================================== telltarget CMS 1.3.3 = Multipl...
telltarget 1.3.3 - tt_docroot Remote File Inclusion
telltarget 1.3.3 - ttdocroot Remote File Inclusion telltarget CMS 1.3.3 = Multiple Remote File Inclusion Vulnerabilitie D.Script: http://www.telltargetcms.de/download/telltarget1.3.3.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc...
CVE-2007-0230
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...
CVE-2007-0230
CS-Cart 1.3.3 contains a PHP remote file inclusion in install.php via the install_dir parameter, potentially allowing remote code execution. Several sources note that the vulnerability is disputed because install_dir is defined before use, and no specific exploit details are provided in the docum...
CVE-2006-2863
PHP remote file inclusion vulnerability in class.csphpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...
CVE-2006-2863
CVE-2006-2863 affects CS-Cart 1.3.3 via a PHP remote file inclusion in class.cs_phpmailer.php, exploitable through the classes_dir parameter to execute arbitrary PHP code. The NVD entry notes a Network attack vector with authentication not required and partial confidentiality/integrity/availabili...
[SA19323] RunIt "chpst" Multiple Groups Handling Security Issue
TITLE: RunIt "chpst" Multiple Groups Handling Security Issue SECUNIA ADVISORY ID: SA19323 VERIFY ADVISORY: http://secunia.com/advisories/19323/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: runit 1.x http://secunia.com/product/8850/ DESCRIPTION: Tino Keitel ha...
CVE-2005-3012
The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images...
[Full-disclosure] SimpleCDR-X - Insecure tempfile handling
SimpleCDR-X - Insecure tempfile handling +----------------------------------------+ Date: 2005-09-15 URL: http://ogre.rocky-road.net/cdr.shtml Vendor Notified: Days ago, no answer. Version: 1.3.3 latest - Description - Files beeing recorded can be read by any user on the system due to insecure...
Moodle < 1.3.3 'help.php' 'file' Parameter XSS
The version of Moodle running on the remote host is affected by a cross-site scripting vulnerability. Input to the 'file' parameter of 'help.php' is not properly sanitized. A remote attacker can exploit this by tricking a user into requesting a maliciously crafted URL, resulting in stolen...
CVE-2004-0603
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332...
