CVE-2008-2980

Multiple cross-site scripting XSS vulnerabilities in HomePH Design 2.10 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 errormeldung parameter to admin/features/register/register.php, the 2 featurelanguageueberschrift parameter to...

CVE-2008-2981

CVE-2008-2981 describes a PHP remote file inclusion vulnerability in the admin/templates/template_thumbnail.php of HomePH Design 2.10 RC2. The issue arises when register_globals is enabled, allowing a remote attacker to cause arbitrary PHP code execution by supplying a URL in the thumb_template p...

CVE-2008-2982

Multiple directory traversal vulnerabilities in HomePH Design 2.10 RC2, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 thumbtemplate parameter to a admin/templates/templatethumbnail.php, and the 2...

HomePH Design 2.10 RC2 (RFI/LFI/XSS) Multiple Vulnerabilities

No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rise...

HomePH Design 2.10 RC2 (RFI/LFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= HomePH Design 2.10 RC2 RFI/LFI/XSS Multiple Vulnerabilities =============================================================...

HomePH Design 2.10 RC2 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

Fedora 8 : nagios-2.10-5.fc8 (2007-4145)

Thu Nov 29 2007 Mike McGrath 2.10-5 - Upstream released 2.10 - Renamed cfg-sample configs to just .cfg - Added BR of perl-devel, libjpeg-devel, libpng-devel - Wed Sep 26 2007 Mike McGrath 2.9-5 - rebuild for koji test - Sat Sep 8 2007 Mike McGrath 2.9-4 - rebuild Note that Tenable Network...

CVE-2007-1669

zoo decoder 2.10 zoo-2.10, as used in multiple products including 1 Barracuda Spam Firewall 3.4 and later with virusdef before 2.0.6399, 2 Spam Firewall before 3.4 20070319 with virusdef before 2.0.6399o, and 3 AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service infinit...

Sql injection

SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter...

CVE-2007-1931

SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in the sesionidioma parameter...

CVE-2007-0580

CVE-2007-0580 affects Foro Domus 2.10: PHP remote file inclusion in menu.php via the sesion_idioma parameter allows remote code execution. Root cause is including remote PHP files through a crafted URL. Public references indicate exploits exist (e.g., Exploit-DB), but remediation details are not ...

phpPowerCards 2.10 (txt.inc.php) Remote Code Execution Vulnerability

+------------------------------------------------------------------------------------------- + phpPowerCards 2.10 txt.inc.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: phpPowerCards 2.10 ...

EUVD-2006-5417

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when registerglobals is enabled, allow remote attackers to create or overwrite arbitrary files via the 1 emailto, 2 emailfrom, 3 nameto, 4 namefrom, 5 picture, 6 comment, or 7 sessionID parameter, as...

PHPPowerCards 2.10 - 'txt.inc.php' Remote Code Execution

+------------------------------------------------------------------------------------------- + phpPowerCards 2.10 txt.inc.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: phpPowerCards 2.10 ...

CVE-2006-2694

CVE-2006-2694 affects EzUpload Pro 2.10 and describes multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by providing a URL in the path parameter to any of three scripts: form.php, customize.php, and initialize.php. The underlying r...

CVE-2006-1269

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited,...

Buffer overflow

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited,...

CVE-2006-1269

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited,...

CVE-2006-1269

Buffer overflow in the parse function in parse.c in zoo 2.10 might allow local users to execute arbitrary code via long filename command line arguments, which are not properly handled during archive creation. NOTE: since this issue is local and not setuid, the set of attack scenarios is limited,...