CVE-2010-2677

Open Web Analytics (OWA) 1.2.3 is affected by a PHP remote file inclusion due to mw_plugin.php, where enabling register_globals and disabling magic_quotes_gpc allows an attacker to execute arbitrary PHP code via a URL in the IP parameter. The root cause is improper handling of user input in the R...

CVE-2010-2677

creationtimestamp| type| source ---|---|--- 2010-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11903...

CVE-2009-2677

HP Insight Control Suite For Linux (ICE-LX) before version 2.11 is affected by CVE-2009-2677, a CSRF vulnerability that could allow remote attackers to hijack user authentication via unknown vectors. The related Security Bulletin and CVE records confirm affected versions up to v2.10 and indicate ...

CVE-2008-2677

CVE-2008-2677 describes a cross-site scripting (XSS) vulnerability in the Telephone Directory 2008 product, specifically in edit1.php where the action parameter can be abused to inject arbitrary web script or HTML. The included sources consistently state that remote attackers can leverage this fl...

CVE-2008-2677

creationtimestamp| type| source ---|---|--- 2008-06-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5764...

CVE-2007-2677

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the config parameter to includes/language.php, or the RootPath parameter to 2 layoutadmincfg.php, 3 layoutcfg.php, or 4 layoutttop.php in...

CVE-2007-2677

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the config parameter to includes/language.php, or the RootPath parameter to 2 layoutadmincfg.php, 3 layoutcfg.php, or 4 layoutttop.php in...

CVE-2007-2677

CVE-2007-2677 affects phpChess Community Edition 2.0 with multiple PHP remote file inclusion vectors. The affected components are (1) config parameter to includes/language.php and (2)-(4) Root_Path/Parameters to layout_admin_cfg.php, layout_cfg.php, and layout_t_top.php in skins/phpchess/. The vu...

CVE-2004-2677

CVE-2004-2677 affects QwikMail SMTP (qwik-smtpd) version 0.3 and earlier. The flaw is a format string vulnerability in qwik-smtpd.c that allows remote attackers to achieve arbitrary code execution via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variable...

CVE-2006-2677

CVE-2006-2677 affects SiteScape Forum 7.2 (and possibly earlier). The issue arises from storing the avf.rc configuration file under the web document root with insufficient access controls, which allows remote attackers to obtain sensitive path information. The publicly available records describe ...