CVE-2006-7108

CVE-2006-7108 relates to util-linux (2.12a and later) where the login path can bypass authentication checks by skipping pam_acct_mgmt and pam_chauthtok when authentication is skipped (for example after Kerberos krlogin). Public advisories (RHSA-2007:0235, MDKSA-2007:111, CESA-2007:0235) describe ...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

CVE-2006-7104

The CVE-2006-7104 entry describes a PHP remote file inclusion vulnerability in MOStlyContent Editor (MOStlyCE) for Mambo 4.5.4. The flaw is in htmltemplate.php where remote code execution is possible via a URL supplied to the mosConfig_absolute_path parameter, enabling an attacker to run arbitrar...

CVE-2006-7106

The CVE-2006-7106 entry concerns Power Phlogger up to version 2.0.9 where a PHP remote file inclusion flaw exists in config.inc.php3. The vulnerability is triggered by supplying a URL in the rel_path parameter, enabling remote attackers to execute arbitrary PHP code. This is a remote, unauthentic...

CVE-2006-7107

CVE-2006-7107 is a PHP remote file inclusion vulnerability in upgrade.php of Coalescent Systems freePBX 2.1.3. The issue allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter, due to inadequate input handling. The linked sources (NVD and CVE listing...

CVE-2006-7100

CVE-2006-7100 is a PHP remote file inclusion vulnerability in the phpBB Insert User extension (version 0.1.2 and earlier). The flaw resides in includes/functions_mod_user.php and allows remote attackers to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. Affected pr...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

CVE-2006-7101

The CVE-2006-7101 entry concerns PHPWind versions 5.0.1 and earlier where the admin.php component is vulnerable to SQL injection via the AdminUser cookie. The root cause is improper handling of the cookie leading to arbitrary SQL execution by remote attackers, with a high impact (base score 7.5)....

CVE-2006-7105

CVE-2006-7105 is a PHP remote file inclusion vulnerability affecting Smarty 2.6.9 (libs/Smarty.class.php). The connected records describe the flaw as allowing remote attackers to execute arbitrary PHP code via a URL in the filename parameter. The note from the NVD entry indicates the original dis...

CVE-2006-7102

CVE-2006-7102 describes multiple PHP remote file inclusion vulnerabilities in the phpBurningPortal quiz-modul 1.0.1 (and possibly earlier) that allow remote attackers to execute arbitrary PHP code via a URL supplied to the lang_path parameter in one of three scripts: quest_delete.php, quest_edit....

CVE-2006-7098

The CVE-2006-7098 entry concerns the Debian patch for Apache HTTP Server 1.3.34-4 (033_-F_NO_SETSID) that fails to fully disassociate httpd from a controlling tty when started interactively. This allows a local attacker to elevate privileges to the tty via a CGI program invoking the TIOCSTI ioctl...

CVE-2006-7099

The CVE-2006-7099 entry describes a directory traversal vulnerability in SolarPay’s index.php, exploitable via a .. in the read parameter to read files. Affected software is SolarPay (component: index.php handling read parameter). Underlying cause: improper validation of path input leading to una...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: issue might overlap...

Authentication flaw

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a wsauth cookie, a different vulnerability than CVE-2006-4782...

CVE-2006-7084

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-7083. Reason: This candidate is a duplicate of CVE-2006-7083. Notes: All CVE users should reference CVE-2006-7083 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2006-3892

The Management Console server in EMC NetWorker formerly Legato NetWorker 7.3.2 before Jumbo Update 1 uses weak authentication, which allows remote attackers to execute arbitrary commands...

CVE-2006-7074

admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName cookie...

Buffer overflow

Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might overlap CVE-2006-2225, CVE-2006-2226, or CVE-2006-5728...

CVE-2006-7094

ftpd, as used by Gentoo and Debian Linux, sets the gid to the effective uid instead of the effective group id before executing /bin/ls, which allows remote authenticated users to list arbitrary directories with the privileges of gid 0 and possibly enable additional attack vectors...