CVE-2010-0303

The CVE-2010-0303 vulnerability affects hybserv in IRCD-Hybrid (Hybrid2 IRC Services) versions 1.9.2 to 1.9.4, where a remote user can crash the daemon by sending a MemoServ private message containing the sequence ":help \t". Technical sources consolidate this as a denial-of-service issue arising...

Code injection

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log...

CVE-2009-4454

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log...

CVE-2009-4454

vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log...

VideoCache 1.9.2 - vccleaner Local Privilege Escalation

VideoCache 1.9.2 - vccleaner Local Privilege Escalation ==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges...

CVE-2009-2396

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

WordPress Plugin DM Albums 1.9.2 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== WordPress Plugin DM Albums 1.9.2 Remote File Disclosure Vulnerability ===================================================================== + WordPress Plugin DM Albums...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

[SECURITY] Fedora 8 Update: xastir-1.9.2-8.fc8

Xastir is a graphical application that interfaces HAM radio and internet access to realtime mapping software. Install XASTIR if you are interested in APRStm and HAM radio software...

CVE-2007-0894

MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to 1 Simple.deps.php, 2 MonoBook.deps.php, 3 MySkin.deps.php, or 4 Chick.deps.php in wiki/skins, which shows the installation path in the resulting error message...

ThinkEdit 1.9.2 (render.php) Remote File Inclusion Vulnerability

No description provided by source. r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By:...

thinkedit-rfi.txt

r0ut3r Presents... Another r0ut3r discovery! writ3r at gmail.com ThinkEdit Remote File Inclusion Exploit Software: ThinkEdit 1.9.2 Vendor: http://www.thinkedit.org/ Released: 2006/12/08 Discovered & Exploit By: r0ut3r writ3r at gmail.com Note: The information provided in this document is for...

Kile: Incorrect backup file permission

Background Kile is a TeX/LaTeX editor for KDE. Description Kile fails to set the same permissions on backup files as on the original file. This is similar to CVE-2005-1920. Impact A kile user may inadvertently grant access to sensitive information. Workaround There is no known workaround at this...

CVE-2006-4059

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...

CVE-2005-3528

Cross-site scripting XSS vulnerability in tiki-viewforumthread.php in TikiWiki 1.9.0 through 1.9.2 allows remote attackers to inject arbitrary web script or HTML via the topicsoffset parameter...

CVE-2005-3689

post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action...

CVE-2005-3689

post.php in XMB 1.9.2 allows remote attackers to obtain the installation path via an invalid fid parameter in a newthread action...

CVE-2005-3689

CVE-2005-3689 affects XMB Forum 1.9.2, specifically the post.php file. The vulnerability occurs when processing a newthread action with an invalid fid parameter, enabling remote attackers to disclose the installation path. This is evidenced by multiple connected documents citing: post.php in XMB ...