86 matches found
CVE-2007-3221
CVE-2007-3221 is a PHP remote file inclusion in XOOPS XT-Conteudo module; the vulnerable file is admin/spaw/spaw_control.class.php, exploitable via a URL in the spaw_root parameter to execute arbitrary PHP code. The issue is noted as probably a duplicate of CVE-2006-4656. Related entries (CVE-200...
CVE-2007-3221
PHP remote file inclusion vulnerability in admin/spaw/spawcontrol.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...
CVE-2006-3221
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction...
CVE-2006-3221
DataLife Engine
CVE-2005-3221
Multiple interpretation error in unspecified versions of Fortinet Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR file with malformed central and local headers, which can still be opened by products such as Winrar and PowerZip, eve...
CVE-2005-3221
CVE-2005-3221 : Multiple interpretation errors in unspecified versions of Fortinet Antivirus allow remote attackers to bypass virus detection by presenting a malicious executable embedded in a specially crafted RAR file with malformed central and local headers. The crafted archive can be opened b...