CVE-2006-3387

Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot sequence in the filconfig parameter, which can be used to execute PHP code that has been injected into a log file...

CVE-2006-3387

CVE-2006-3387 describes a directory traversal vulnerability in Fusion News 1.0. When register_globals is enabled, an attacker can manipulate the fil_config parameter in sources/post.php using a .. sequence to include arbitrary files. This can allow an attacker to execute PHP code that has been in...

Communigate Pro < 5.0.7 LDAP Module BER Decoding DoS

Binary data 3387.prm...

CVE-2005-3387

The CVE-2005-3387 issue affects ntop prior to version 3.2. The startup script in packages/RedHat/ntop.init creates temporary files insecurely when ntop.conf is writable by non-root users, enabling arbitrary code execution by a remote attacker. The provided documents do not specify exploitation ve...