Solaris 2.5.1 (sparc) : 110029-02

The remote host is missing Sun Security Patch number 110029-02 VRTSvmsa 3.0.3: Security patch. Date this patch was last updated by Sun : Fri Jan 05 03:59:31 MST 2001 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated a...

Solaris 2.6 (sparc) : 110029-02

The remote host is missing Sun Security Patch number 110029-02 VRTSvmsa 3.0.3: Security patch. Date this patch was last updated by Sun : Fri Jan 05 03:59:31 MST 2001 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated a...

CVE-2006-6957

PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...

CVE-2006-6957

Docebo 3.0.3 and earlier are affected by PHP remote file inclusion via the Docebo GLOBALS vulnerability. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by passing a URL through the GLOBALS[where_framework] parameter (and variants via GLOBALS[where_cms] in...

CVE-2006-4678

The CVE-2006-4678 entry concerns News Evolution 3.0.3, which is vulnerable to a PHP remote file inclusion via the _NE[AbsPath] parameter in install.php and migrateNE2toNE3.php. The vulnerability is remote, requires no authentication, and can yield arbitrary PHP code execution. CVSS v2 base score ...

News Evolution 3.0.3 _NE[AbsPath] Remote File Include Vulnerabilities

No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- News Evolution v3.0.3 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=825 Script : News Evolution v3.0.3 Credits : ERNE Contact : [email protected] and irc.gigachat.net...

DoceboCMS303.txt

----------------------------------------------------- Advisory id: FSA:007 Author: Federico Fazzi Date: 09/06/2006, 6:10 Sinthesis: Docebo CMS 3.0.3, Remote command execution Type: high Product: http://www.docebolms.org/ Patch: unavailable ----------------------------------------------------- 1...

Docebo Core 3.0.3, Remote command execution

----------------------------------------------------- Advisory id: FSA:008 Author: Federico Fazzi Date: 09/06/2006, 6:44 Sinthesis: Docebo Core 3.0.3, Remote command execution Type: high Product: http://www.docebolms.org/ Patch: unavailable ----------------------------------------------------- 1...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 GLOBALSwhereframework to a lib.simplesel.php, b lib.filelist.php, c tree.documents.php, d lib.repo.php, and e lib.ph...

CVE-2006-2577

Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in 1 wherecms, 2 wherelms, 3 whereupgrade, 4 BBCLIBPATH, and 5 BBCLANGUAGEPATH parameters in various unspecified scripts...

CVE-2006-2576

CVE-2006-2576 corresponds to Docebo PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier when register_globals is enabled. The issue allows remote code execution by supplying a URL via GLOBALS[where_framework] (files: lib.simplesel.php, lib.filelist.php, tree.documents.php, lib.r...

[Full-disclosure] Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 11/05/2006 - UltimateZip unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2005-3152

Multiple cross-site scripting XSS vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to 1 cart.php or 2 index.php, or 3 the searchStr parameter in a viewCat action to index.php. Note: vectors 1 and 2 were later reported to affec...

cubecart-3.0.3.txt

CubeCart™ 3.0.3 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=363 Advisore:http://lostmon.blogspot.com/2005/09/ cubecart-303-multiple-variable-cross.html vendor confirmed: yes exploit avalable: yes Fix available: yes CubeCar...

CVE-2002-1883

Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service...

CVE-2002-1883

CVE-2002-1883 affects Trolltech Qt Assistant 1.0 within Trolltech Qt 3.0.3 when loaded from the Designer, which opens port 7358 for interprocess communication. This enables remote attackers to open arbitrary HTML pages and cause a denial of service. The connected Red Hat and CVE records corrobora...

security flaw

Apache SpamAssassin 3.0.1, 3.0.2, and 3.0.3 allows remote attackers to cause a denial of service CPU consumption and slowdown via a message with a long Content-Type header without any boundaries...

PT-2005-2273 · Apache +1 · Apache Spamassassin +1

Name of the Vulnerable Software and Affected Versions: Apache SpamAssassin versions 3.0.1 through 3.0.3 Description: The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and slowdown. This can be achieved by sending a message with a long Content-Type header...

CVE-2005-1821

CVE-2005-1821 : The affected software is PowerDownload 3.0.2 and 3.0.3. The vulnerability is a PHP remote file inclusion in pdl_header.inc.php that allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php. The available connected documents corroborate the de...

PowerDownload 3.0.2/3.0.3 - IncDir Remote File Inclusion

source: https://www.securityfocus.com/bid/13822/info PowerDownload is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an...