CVE-2007-2960

CVE-2007-2960 : Concrete details show multiple PHP remote file inclusion vulnerabilities in Scallywag (2005-04-25) where an attacker can include and execute arbitrary local PHP code via a URL in the path parameter to template.php for skin/dark/, skin/gold/, or skin/original/. The underlying cause...

CVE-2006-2960

PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-2960

CVE-2006-2960 describes a PHP remote file inclusion in Joomla! 1.0. The flaw is in includes/joomla.php where an attacker can supply a URL via the includepath parameter to cause the execution of arbitrary PHP code on the vulnerable host. The vulnerability is a remote code inclusion with network ac...

CVE-2006-2960

PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

FreeBSD : cfengine -- arbitrary file overwriting vulnerability (8688d5cd-328c-11da-a263-0001020eed82)

A Debian Security Advisory reports : Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine,...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...

CVE-2005-2960

Removed by vendor...

[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 836-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 835-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...