144 matches found
CVE-2007-4448
The CVE-2007-4448 issue affects the Toribash server (version 2.71 and earlier). The vulnerability arises because the server fails to correctly handle partially joined clients that temporarily take the ID of -1, which enables remote attackers to trigger a denial of service (daemon crash) via a GRI...
CVE-2006-4448
CVE-2006-4448 concerns PHP remote file inclusion in Interact 2.2/2.x when register_globals is on. The vulnerable vectors are (1) CONFIG[BASE_PATH] via admin/autoprompter.php and includes/common.inc.php, and (2) CONFIG[LANGUAGE_CPATH] via admin/autoprompter.php. This allows arbitrary PHP code exec...
CVE-2005-4448
CVE-2005-4448 concerns FlatNuke 2.5.6 where authentication credentials are verified using an MD5 checksum of the admin name and the hashed password instead of the plaintext password. This allows an attacker who can obtain the password hash (notably via CVE-2005-2813) to compute credentials and in...
