CVE-2005-1447

The CVE-2005-1447 vulnerability affects SitePanel (SitePanel2) 2.6.1 and earlier. It is a PHP remote file inclusion in main.php that allows an attacker to execute arbitrary PHP code by supplying a crafted value for the p parameter. The vulnerability score (NVD CVSS v2) is notable: AV:N/AC:L/Au:N/...

CVE-2005-0543

Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...

CVE-2005-0543

Cross-site scripting XSS vulnerability in phpMyAdmin 2.6.1 allows remote attackers to inject arbitrary HTML and web script via 1 the strServer, cfgBgcolorOne, or strServerChoice parameters in selectserver.lib.php, 2 the bgcolor or rowno parameters in displaytbllinks.lib.php, the leftfontfamily...

XBlast 2.6.1 - 'HOME Environment' Local Buffer Overflow

// source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would allow a local user to execute code with a gid of game...

Enceladus Server Suite traversal directory vulnerability

Summary: Enceladus Server Suite is an internet/intranet lightweight web and ftp server for windows. Details: The web server has been found to contain a security flaw that allows attackers to travers up the root directory and view/download files on the system. Vulnerable System: Enceladus Server...

CVE-2001-0550

wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "" argument to commands such as CWD, which is not properly handled by the glob function ftpglob...

CVE-2001-0550

CVE-2001-0550 affects wu-ftpd 2.6.1, where the ftpglob (glob) handling of a ~{ argument in commands like CWD can lead to remote command execution. The vulnerability is documented as a remote code execution flaw in the ftpglob implementation, allowing an attacker to run arbitrary commands on the a...

CVE-2001-0187

CVE-2001-0187 concerns WU-FTPD up to version 2.6.1, where a format-string vulnerability in debug mode can allow remote code execution. The issue affects WU-FTPD when using RFC 931 authentication with debugging enabled, potentially letting an attacker craft ident responses that are logged by the s...

WU-FTPD Improper Ftpglob Error Handling Vulnerability

Advisory ID Internal CORE-211001 Bugtraq ID: 3581 CVE Name: CVE-2001-0550 CERT: VU886083 Title: WU-FTPD Improper Ftpglob Error Handling Vulnerability Class: Failure to handle exceptional conditions Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode: FORCED RELEASE Vulnerability...