65 matches found
CVE-2007-4764
CVE-2007-4764 affects Pawfaliki 0.5.1, where the PHP script pawfaliki.php is vulnerable to a directory-traversal via the page parameter. The root cause is improper handling of relative path components (..), enabling remote attackers to list arbitrary files. The vulnerability is documented in mult...
CVE-2006-4764
CVE-2006-4764 describes a PHP remote file inclusion vulnerability in common.php of Thomas LETE WTools 0.0.1-ALPH. The flaw allows an attacker to cause arbitrary PHP code execution by providing an attacker-controlled URL in the include_path parameter. Affected software is the WTools package (versi...
CVE-2005-4764
CVE-2005-4764 affects BEA WebLogic Server and WebLogic Express versions 9.0, 8.1, and 7.0. The issue causes the admin user account to be locked out after multiple incorrect password guesses, enabling remote attackers who know or guess the admin username to cause a denial of service via blocked ad...