CVE-2006-4073

CVE-2006-4073 affects Fabian Hainz’s phpCC Beta 4.2. The issue is multiple PHP remote file inclusion through the base_dir parameter in login.php, reactivate.php, and register.php, allowing remote code execution. The core cause is improper handling of base_dir leading to inclusion of attacker-cont...

EUVD-2006-4065

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion

SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt Greetz: choi , h4ntu , Ibnusina ,...

phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpCC 4.2 beta basedir Remote File Inclusion Vulnerability ============================================================= SolpotCrew Community phpCC - Beta 4.2 basedir Remote Fil...

phpCC 4.2 Beta - 'base_dir' Remote File Inclusion

SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt Greetz: choi , h4ntu , Ibnusina ,...

CVE-2006-3373

Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root...

CVE-2006-3373

Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root...

Hobbit monitor: Security issue with Hobbit 4.2-beta client

I was just notified by a Hobbit user that the current beta client has a security problem in the client "logfetch" utility, when installed as suid-root which is the default if "make install" is executed as root. Impact ------ The effect of this is that any user who is able to login and create file...

CVE-2006-2873

Cross-site scripting XSS vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2873

CVE-2006-2873 describes a Cross‑site Scripting (XSS) vulnerability in the Enigma Haber 4.2 web application, specifically in the file hava.asp, exploitable via the il parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The description notes that provenance ...

CVE-2006-2873

Cross-site scripting XSS vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-2442

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords...

CVE-2006-2442

CVE-2006-2442 affects KPhone, a KDE VoIP client. The issue: kphone 4.2 creates the configuration file .qt/kphonerc with world-readable permissions, allowing local users to read usernames and SIP passwords. Connected advisories (Mandriva/MK, Debian DSA-1062-1, SUSE) confirm the root cause and stat...

CVE-2006-2442

kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords...

Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit

Exploit for unknown platform in category web applications ============================================================== Sugar Suite Open Source = 4.2 OptimisticLock Remote Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Sugar Sui...

CVE-2006-1486

CVE-2006-1486: RealestateZONE version 4.2 contains multiple cross-site scripting (XSS) vulnerabilities in index.cfm. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) bamin, (2) bemin, (3) pmin, and (4) state). The available sources confirm the vulner...

CVE-2006-1432

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL...

Design/Logic Flaw

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL...

Cross site scripting

Cross-site scripting XSS vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded 1 srchfor and 2 srchby parameters...

CVE-2006-1431

The CVE-2006-1431 entry documents a Cross-site scripting (XSS) vulnerability in the fusionZONE couponZONE 4.2 product, specifically in local.cfm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via URL-encoded parameters (1) srchfor and (2) srchby. The NVD descrip...