CVE-2009-3333

PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit comkoesubmit component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Gentoo Security Advisory GLSA 200809-10 (mantisbt)

The remote host is missing updates announced in advisory GLSA 200809-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-3333

Directory traversal vulnerability in core/langapi.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page accountprefsupdate.php...

CVE-2008-3333

CVE-2008-3333 is a directory traversal vulnerability in MantisBT (core/lang_api.php) where the language parameter on account_prefs_update.php can be exploited to include and execute arbitrary files. Affected: MantisBT prior to 1.1.2. Root cause: improper validation of the language value leading t...

iDefense Security Advisory 07.26.07: IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability

IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability iDefense Security Advisory 07.26.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 26, 2007 I. BACKGROUND The capture program is a setuid root application, installed by default under multiple versions of IBM AIX,...

CVE-2007-3333

CVE-2007-3333 : A stack-based buffer overflow in IBM AIX’s capture utility (affecting AIX 5.3 SP6 and 5.2.0) allows remote attackers to execute arbitrary code by sending a large sequence of terminal control codes. The advisory indicates the vulnerability resides in the code that parses terminal c...

CVE-2006-3333

The CVE-2006-3333 entry describes a Cross-site Scripting (XSS) vulnerability in Zorum Forum 3.5, specifically in index.php. The flaw allows remote attackers to inject web script or HTML through multiple unspecified parameters (notably frommethod, list, and method) which are reflected in an error ...