CVE-2006-3469

Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service crash via a format string instead of a date as the first parameter to the dateformat function, which is later used in a formatted pri...

CVE-2006-3693

Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks \ in an argument to the 1 mount-loop mount-loop.c or 2 umount-loop umount-loop.c command, which is not filtered in a system function call...

[SECURITY] [DSA 1112-1] New mysql-dfsg-4.1 packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1112-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 18th, 2006 http://www.debian.org/security/faq -...

Rocks Clusters <= 4.1 (mount-loop) Local Root Exploit

No description provided by source. !/bin/sh rocksmountdirty.sh: Rocks release =4.1 local root exploit make sure 'mount-loop' is in your path for this to work. coded by: [email protected] http://xavsec.blogspot.com echo "Rocks Clusters =4.1 mount-loop local root exploit by [email protected]...

Rocks Clusters 4.1 - 'mount-loop' Local Privilege Escalation

!/bin/sh rocksmountdirty.sh: Rocks release =4.1 local root exploit make sure 'mount-loop' is in your path for this to work. coded by: [email protected] http://xavsec.blogspot.com echo "Rocks Clusters =4.1 mount-loop local root exploit by [email protected] http://xavsec.blogspot.com" echo...

Rocks Clusters 4.1 - 'umount-loop' Local Privilege Escalation

!/usr/bin/env python rocksumountdirty.py: Rocks release =4.1 local root exploit quick and nasty version of the exploit. make sure the . is writable and you clean up afterwards. ; coded by: [email protected] http://xavsec.blogspot.com x=import'os';c=x.getcwd open'%s/x'%c, 'a'.write"!/bin/sh\ncp...

CVE-2006-3279

Cross-site scripting XSS vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Sex parameter in index.php, 2 ProfileType parameter in joinform.php, and 3 Email parameter in forgot.php...

CVE-2006-3279

Cross-site scripting XSS vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML via the 1 Sex parameter in index.php, 2 ProfileType parameter in joinform.php, and 3 Email parameter in forgot.php...

CVE-2006-3279

CVE-2006-3279 describes a cross-site scripting (XSS) vulnerability in aeDating 4.1. The affected application exposes three vulnerable input points: the Sex parameter in index.php, the ProfileType parameter in join_form.php, and the Email parameter in forgot.php. These allow remote attackers to in...

CVE-2006-2943

Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information...

JVN#39570254 CGI RESCUE WebFORM allows unauthorized email transmission

Impact A remote attacker may send emails to arbitrary addresses. Solution Products Affected WebFORM 4.1 and earlier According to the vendor's information, FORM2MAIL also contains a similar vulnerability, and the fixed version of FORM2MAIL is available...

[SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection

-------------------------------------------------------------------------- Debian Security Advisory DSA 1092-1 [email protected] http://www.debian.org/security/ Martin Schulze June 8th, 2006 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : MySQL (MDKSA-2006:097)

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...

Remote file inclusion

PHP remote file inclusion vulnerability in wk/wklang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WKwkPath parameter...

CVE-2006-2888

CVE-2006-2888 is a PHP remote file inclusion vulnerability in Wikiwig up to version 4.1, triggered via the WK[wkPath] parameter in _wk/wk_lang.php. The underlying issue allows an attacker to supply a URL and cause the application to include and execute remote PHP code, leading to arbitrary code e...

Wikiwig <= 4.1 (wk_lang.php) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Wikiwig = V4.1 Remote File Include Vulnerability $$ Script site: http://wikiwig.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a...

Wikiwig 4.1 - wk_lang.php Remote File Inclusion

Wikiwig 4.1 - wklang.php Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Wikiwig = V4.1 Remote File Include Vulnerability $$ Script site: http://wikiwig.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...

CVE-2006-2753

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysqlrealescape function is...

Design/Logic Flaw

artmedic newsletter 4.1 and possibly other versions, when registerglobals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an...

CVE-2006-2608

The CVE-2006-2608 issue affects artmedic newsletter 4.1 (and possibly older versions) where enabling register_globals allows an attacker to modify arbitrary files and execute PHP code via the logfile parameter in a direct request to log.php. This redefines the $logfile variable to an attacker-con...