CVE-2007-4312

The CVE-2007-4312 entry concerns a SQL injection in Php Blue Dragon CMS 3.0.0. The vulnerability occurs in index.php during the “print articles” action, where the parameter article_id can be used by remote attackers to execute arbitrary SQL commands. Connected sources (NVD/NVD-derived records and...

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution

PHP Blue Dragon CMS 3.0.0 - Remote Code Execution 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to 1 ITX.php, 2 ITError.php, or 3 IT.php in include/pear/...

ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability

ZDI-07-031: Samba smbionotifyoptiontypedata Heap Overflow Vuln http://www.zerodayinitiative.com/advisories/ZDI-07-031.html May 15, 2007 -- CVE ID: CVE-2007-2446 -- Affected Vendor: Samba -- Affected Products: Samba 3.0.0 - 3.0.25rc3 -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

[SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================== == == Subject: Remote Command Injection Vulnerability == CVE ID: CVE-2007-2447 == == Versions: Samba 3.0.0 - 3.0.25rc3 inclusive == == Summary: Unescaped user input parameters are passed == as...

Heap overflow

Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving 1 DFSEnum netdfsiodfsEnumInfod, 2 RFNPCNEX smbionotifyoptiontypedata, 3 LsarAddPrivilegesToAccount...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSCHEMINMODULES parameter...

CVE-2007-2594

CVE-2007-2594 describes a remote file inclusion in phpMyPortal 3.0.0 RC3, specifically in inc/articles.inc.php, where the attacker can supply a URL via the GLOBALS[CHEMINMODULES] parameter to execute arbitrary PHP code. This allows remote code execution on the affected system. The vulnerability’s...

phpMyPortal 3.0.0 RC3 GLOBALS[CHEMINMODULES] RFI Exploit

Exploit for unknown platform in category web applications ======================================================== phpMyPortal 3.0.0 RC3 GLOBALSCHEMINMODULES RFI Exploit ======================================================== phpMyPortal 3.0.0 RC3GLOBALSCHEMINMODULESRemote File Include Exploit...

phpMyPortal 3.0.0 RC3 - GLOBALS[CHEMINMODULES] Remote File Inclusion

phpMyPortal 3.0.0 RC3GLOBALSCHEMINMODULESRemote File Include Exploit //'=============================================================================================== //'Script Name: phpMyPortal 22 acc.s Version 3.0.0 RC3 du 05/05/2007 //'Ex :...

CVE-2006-7120

CVE-2006-7120 is a PHP remote file inclusion in lib/php/phphtmllib-2.5.4; specifically, the vulnerability affects maintain 3.0.0-RC2 via example6.php where a URL supplied to the phphtmllib parameter can lead to code execution. The PT-2007-1398 analysis confirms the affected components: lib/php/ph...

PT-2007-1398 · Php · Lib/Php/Phphtmllib +1

Name of the Vulnerable Software and Affected Versions: lib/php/phphtmllib-2.5.4 maintain version 3.0.0-RC2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. This issue might be related to phpHtmlLib. It is noted...

Format string

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function...

CVE-2007-0647

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service crash via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function...

CVE-2006-5413

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...

CVE-2006-5413

CVE-2006-5413 describes multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) . An attacker can cause arbitrary PHP code execution by providing a URL in the sourcedir parameter to one of four scripts: Offline.php, Sources/Admin.php, Sources/Offline.php, or content...

CVE-2006-5413

Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB YaBBSM allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to 1 Offline.php, 2 Sources/Admin.php, 3 Sources/Offline.php, or 4 content/portalshow.php...

Maintain 3.0.0-RC2 - 'Example6.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion

Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...