Bomberclone 0.11.6 Buffer Overflow

This module exploits a stack buffer overflow in Bomberclone 0.11.6 for Windows. The return address is overwritten with lstrcpyA memory address, the second and third value are the destination buffer, the fourth value is the source address of our buffer in the stack. This exploit is like a return i...

CVE-2006-6789

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Phpbbxtra 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-6796

PHP remote file inclusion vulnerability in admin/adminsettings.php in MTCMS 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the insfile parameter...

[SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1243-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

CVE-2006-6786

CVE-2006-6786 affects Open Newsletter 2.5 and earlier. The vulnerability enables remote authenticated administrators to execute arbitrary PHP code by inserting code into the email parameter of subscribe.php or unsubscribe.php. This leads to potential code execution with the privileges of the auth...

CVE-2006-6779

CVE-2006-6779 describes a Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin where remote attackers can inject arbitrary web script or HTML via an SWF file that uses ActionScript to trigger execution of JavaScript. The vulnerability is associated with vBulletin's SWF content and leads ...

CVE-2006-6793

PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2006-6777

CVE-2006-6777 is a Cross‑site Scripting (XSS) vulnerability affecting the Future Internet index.cfm page. The issue arises from manipulating the categoryId parameter in a Portal.ShowPage action, allowing remote attackers to inject arbitrary web script or HTML. The published metric indicates a CVS...

CVE-2006-6794

EFkan Forum 1.0 is affected by an SQL injection in default.asp, exploitable via the grup parameter. The vulnerability allows remote command execution on the database layer and is documented across CVE-2006-6794 and related entries (e.g., CVE-2006-6828) indicating multiple SQL injection vectors in...

CVE-2006-6791

SQL injection vulnerability in SelGruFra.asp of chatwm 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) txtUse and (2) txtPas parameters. Affected software: chatwm 1.0. Root cause: improper handling of input leading to SQL injection. Impact: potential unauthorized data ac...

CVE-2006-6783

CVE-2006-6783 pertains to logahead UNU 1.0 prior to 20061226. Affected component: plugins/widged/_widged.php (WidgEd plugin). Root cause indicated as an unrestricted file upload vulnerability that may be tied to an authentication bypass, enabling remote attackers to upload arbitrary files. This c...

CVE-2006-6784

Netbula Anyboard is affected by CVE-2006-6784 through a SQL injection in the login form’s user name field. The vulnerability allows remote attackers to execute arbitrary SQL commands. The available documents identify the affected product and the underlying issue (SQL injection) but do not provide...

CVE-2006-6795

The CVE describes a PHP remote file inclusion in the My_eGallery 2.5.6 module of myPHPNuke, specifically in gallery/displayCategory.php. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a URL in the basepath parameter. This is a server-side RFI risk that cou...

CVE-2006-6790

Summary: CVE-2006-6790 affects Ultimate PHP Board (UPB) 2.0b1 and earlier. The vulnerability is in chat/login.php where the username parameter is written to chat/text.php without proper sanitization, allowing an attacker to inject arbitrary PHP code that can be executed with the web server user p...

CVE-2006-6789

CVE-2006-6789 describes a PHP remote file inclusion vulnerability in Phpbbxtra 2.0 where includes/archive/archive_topic.php is vulnerable. An attacker can cause remote PHP code execution by supplying a URL in the phpbb_root_path parameter. The vulnerability is classified based on NVD data with a ...

CVE-2006-6785

CVE-2006-6785 affects Open Newsletter 2.5 and earlier. The (1) settings.php and (2) subscribers.php scripts do not exit after authentication fails, enabling remote attackers to perform unauthorized administrative actions and, in combination with another vulnerability, to execute arbitrary code. A...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

CVE-2006-6793

The CVE-2006-6793 issue affects Okul Merkezi Portal 1.0, specifically the ataturk.php component. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a malicious URL in the page parameter. This is a server-side code execution risk wit...

ImageMagick SGI File Handling Buffer Overflow (CVE-2006-4144)

A buffer overflow vulnerability has been discovered in the ImageMagick SGI decoder component. The vulnerability is due to an error in the ImageMagick SGI decoder component that fails to sufficiently check data contained in SGI files during processing. A remote attacker may exploit this issue by...