WebMatic 2.6 (index_album.php) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------- Title : WebMatic 2.6 Author : MadNet Contact : MadNetatHackertrDotorg S.Page : www.valarsoft.com :...

webmatic-rfi.txt

----------------------------------------------------------------------------------------------- Title : WebMatic 2.6 Author : MadNet Contact : MadNetatHackertrDotorg S.Page : www.valarsoft.com : ------------------------------------------------------------------------------------------------- Erro...

CVE-2007-0839

Multiple PHP remote file inclusion vulnerabilities in index/indexalbum.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 PLIB and 2 PINDEX parameters...

WebMatic 2.6 - index_album.php Remote File Inclusion

WebMatic 2.6 - indexalbum.php Remote File Inclusion ----------------------------------------------------------------------------------------------- Title : WebMatic 2.6 Author : MadNet Contact : MadNetatHackertrDotorg S.Page : www.valarsoft.com :...

WebMatic 2.6 - 'index_album.php' Remote File Inclusion

----------------------------------------------------------------------------------------------- Title : WebMatic 2.6 Author : MadNet Contact : MadNetatHackertrDotorg S.Page : www.valarsoft.com : ------------------------------------------------------------------------------------------------- Erro...

CVE-2006-6535

The devqueuexmit function in Linux kernel 2.6 can fail before calling the localbhdisable function, which could lead to data corruption and "node lockups." NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6535

CVE-2006-6535 affects the Linux kernel 2.6 series, where a flaw in the dev_queue_xmit() error handling path in the network subsystem can lead to data corruption. Multiple advisories and scanners (e.g., Debian DSA-1304-1, Red Hat/CentOS RHSA-2007:0014, OpenVAS entries) map this to a local data cor...

security flaw

The blockpreparewrite function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked...

Squid < 2.6.STABLE7 Multiple Vulnerabilities

Binary data 3887.prm...

CVE-2007-0247

squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service core dump via crafted FTP directory listing responses, possibly related to the 1 ftpListingFinish and 2 ftpHtmlifyListEntry functions...

CVE-2007-0248

CVE-2007-0248 affects Squid up to version 2.6.STABLE7, where the aclMatchExternal function can be abused to overload external ACL queues, triggering an infinite loop and a denial of service (crash). The known impact is a network-exploitable DoS with partial availability impact. Remediation presen...

CVE-2006-6721

Multiple cross-site scripting XSS vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the 1 sbNick or 2 sbKommentar parameter...

CVE-2006-6106

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...

Knusperleicht Shoutbox 2.6 - 'Shout.php' HTML Injection

source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected...

Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection

Knusperleicht Shoutbox 2.6 - Shout.php HTML Injection source: https://www.securityfocus.com/bid/21637/info Knusperleicht Shoutbox is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute...

Mandrake Linux Security Advisory : krb5 (MDKSA-2006:139)

A flaw was discovered in some bundled Kerberos-aware packages that would fail to check the results of the setuid call. This call can fail in some circumstances on the Linux 2.6 kernel if certain user limits are reached, which could be abused by a local attacker to get the applications to continue...

CVE-2006-6116

SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2006-6058

CVE-2006-6058 affects the Linux kernel 2.6.x up to 2.6.24 (including 2.6.18). Local users can cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in minix_bmap. The issue may involve an integer overflow or signedness error. The documented fix is a ker...

CVE-2006-5823

The zlibinflate function in Linux kernel 2.6.x allows local users to cause a denial of service crash via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs...

Solaris 2.6 (sparc) : 104829-02

The remote host is missing Sun Security Patch number 104829-02 FLEXlm 4.1c: Patch for FLEXlm 4.1c and lit/littty. Date this patch was last updated by Sun : Thu Dec 23 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script ha...