86 matches found
CVE-2007-2881
Sun Java System Web Proxy Server (sockd) is affected by a buffer overflow in the SOCKS proxy support during protocol negotiation. The issue resides in the sockd daemon and can allow a remote attacker to execute arbitrary code with the privileges of the SOCKS server; impact is described as remote ...
CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support sockd in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation...
CVE-2006-2881
Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dapath parameter in the 1 auth.cookie.inc.php, 2 auth.header.inc.php, or 3 auth.sessions.inc.php scripts...
CVE-2006-2881
DreamAccount 3.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL to the da_path parameter in one of three scripts: auth.cookie.inc.php, auth.header.inc.php, or a...
CVE-2005-2881
CVE-2005-2881 affects phpCommunityCalendar 4.0.3. Remote attackers can bypass authentication via a direct request to the admin directory. NVD CVSS v2 base score 7.5 (HIGH): NETWORK vector, low attack complexity, no authentication required; confidentiality, integrity, and availability are partiall...