CVE-2006-2393

The CVE-2006-2393 entry documents a vulnerability in Empire (server) prior to and including version 4.3.2, where the client_cmd function can be triggered remotely. The underlying issue is that excessively long text strings appended to the player->client buffer lead to an invalid memory access,...

Empire 4.3.2 - strncat Denial of Service

Empire 4.3.2 - strncat Denial of Service Empire = 4.3.2 strncat Denial of Service Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/1782.zip 05132006-empiredos.zip milw0rm.com 2006-05-14...

Empire 4.3.2 - 'strncat' Denial of Service

Empire = 4.3.2 strncat Denial of Service Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1782.zip 05132006-empiredos.zip milw0rm.com 2006-05-14...

CVE-2006-1853

Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to execute arbitrary SQL commands via the 1 id parameter in a user.php, or 2 where and 3 order parameters to b admin.php...

[DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue

---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-003 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-003 Project: Drupal core Date: 2006-03-13 Security risk: less critical...

DRUPAL-SA-2006-003 Session fixation vulnerability

If someone creates a clever enough URL and convinces you to click on it, and you later log in but you do not log off then the attacker may be able to impersonate you. Versions affected All Drupal versions before 4.6.6. Solution The fix to this issue requires PHP 4.3.2 or higher, which is higher...

CVE-2003-0442

Cross-site scripting XSS vulnerability in the transparent SID support capability for PHP before 4.3.2 session.usetranssid allows remote attackers to insert arbitrary script via the PHPSESSID parameter...