168 matches found
CVE-2008-4673
CVE-2008-4673 is a PHP remote file inclusion in WebBiscuits Software Events Calendar 1.1. The vulnerability resides in panel/common/theme/default/header_setup.php, allowing an attacker to execute arbitrary PHP code by supplying a URL through the (1) path[docroot] and (2) component parameters. Pub...
CVE-2008-4673
creationtimestamp| type| source ---|---|--- 2008-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6623...
CVE-2007-4673
Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands via a URL in the qtnext field in a crafted QTL file. NOTE: this issue may be related to CVE-2006-4965 or CVE-2007-5045...
CVE-2007-4673
CVE-2007-4673 is an argument-injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista. The issue allows remote attackers to execute arbitrary commands via a URL contained in the qtnext field of a crafted QuickTime QTL file. The description notes potential relation to CVE-2006-4...
QuickTime < 7.2 Security Update (Windows)
The version of QuickTime installed on the remote Windows host may allow a remote attacker to execute arbitrary code if he can trick a user on the affected system into opening a specially crafted QTL file. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid26916;...
CVE-2006-4673
The CVE-2006-4673 entry concerns PHP-Fusion 6.01.4 and earlier, where maincore.php applies extract() to superglobals. This enables a global-variable overwriting flaw that can lead to SQL injection via the _SERVER[REMOTE_ADDR] parameter to news.php. The vulnerability arises from unrestricted varia...
CVE-2005-4673
The CVE-2005-4673 entry concerns ioFTPD version 0.5.84u, where the login reply differs depending on whether a username exists, enabling remote attackers to enumerate valid usernames. This is the core vulnerability: user enumeration via auth responses. The provided documents do not specify a fix o...