145 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Interact Learning Community Environment Interact 2.4.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGLANGUAGECPATH parameter to modules/forum/embedforum.php and the 2...
CVE-2007-4448
The CVE-2007-4448 issue affects the Toribash server (version 2.71 and earlier). The vulnerability arises because the server fails to correctly handle partially joined clients that temporarily take the ID of -1, which enables remote attackers to trigger a denial of service (daemon crash) via a GRI...
CVE-2006-4448
CVE-2006-4448 concerns PHP remote file inclusion in Interact 2.2/2.x when register_globals is on. The vulnerable vectors are (1) CONFIG[BASE_PATH] via admin/autoprompter.php and includes/common.inc.php, and (2) CONFIG[LANGUAGE_CPATH] via admin/autoprompter.php. This allows arbitrary PHP code exec...
CVE-2005-4448
CVE-2005-4448 concerns FlatNuke 2.5.6 where authentication credentials are verified using an MD5 checksum of the admin name and the hashed password instead of the plaintext password. This allows an attacker who can obtain the password hash (notably via CVE-2005-2813) to compute credentials and in...
