CVE-2012-5665

Affected software: ownCloud 4.0.x (before 4.0.10) and 4.5.x (before 4.5.5). Vulnerability: improper restriction of access to settings.php, enabling remote attackers to edit app configurations for user_webdavauth and user_ldap by editing this file. Root cause: settings.php access is not properly g...

Auth bypass in user_webdavauth and user_ldap - ownCloud

ownCloud 4.5.4, ownCloud 4.0.9 and all versions previous to this doesn't sufficiently verify whether a request to settings.php was sent by an admin, which allows unauthenticated users to edit app configurations of userwebdavauth and userldap. An unauthenticated attacker may use this to gain acces...

Code execution in /lib/migrate.php - ownCloud

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows authenticated remote attackers to execute arbitrary code by uploading a crafted mount.php file in an imported ZIP file. Affected Software ownCloud Server 4.0.10 CVE-2013-5665 ownCloud Server 4.5.5 CVE-2013-5665...

CVE-2009-1656

Xerox WorkCentre and WorkCentre Pro 232, 238, 245, 255, 265, 275; and WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, and 7675 allows remote attackers to execute arbitrary commands via unknown attack vectors, aka "command injection vulnerability."...

CVE-2008-5665

CVE-2008-5665: A SQL injection vulnerability exists in the XOOPS xhresim module, specifically in index.php, allowing remote attackers to execute arbitrary SQL commands via the no parameter. The connected documents confirm the affected component (xhresim module, index.php) and the vulnerability cl...

CVE-2008-5665

creationtimestamp| type| source ---|---|--- 2008-10-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6748...

CVE-2007-5665

The CVE-2007-5665 issue affects Novell ZENworks Endpoint Security Management (ESM) STEngine.exe (version around 3.5.0.20) where diagnostic report generation uses scripts in a world-writable directory. The service runs as SYSTEM and will execute a command shell found in that directory; if a local ...

Novell ZENworks ESM客户端STEngine.exe本地权限提升漏洞

BUGTRAQ ID: 27146 CVECAN ID: CVE-2007-5665 Novell ZENworks Endpoint Security Management（ESM）的安全客户端允许集中管理防火墙保护策略。 ESM在处理命令的执行时存在漏洞，本地攻击者可能利用此漏洞提升自己的权限。 当在工作站上安装ZENworks ESM的安全客户端时，就会将STEngine服务设置为在本地SYSTEM帐号下运行。以下可执行程序中实现这个服务： 文件名：STEngine.exe（1,847,296字节） 版本：3.5.0.20...

iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability

iDefense Security Advisory 12.24.07 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 24, 2007 I. BACKGROUND Novell ZENworks Endpoint Security Management ESM Security Client provides centrally managed, policy based firewall protection for clients. It is designed to be installed on all...

CVE-2006-5665

PHP remote file inclusion vulnerability in admin/modulesdata.php in the phpBB module Spider Friendly 1.3.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5665

This CVE concerns a PHP remote file inclusion in the phpBB module Spider Friendly 1.3.10 and earlier. The vulnerability is in admin/modules_data.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the phpbb_root_path parameter. Affected software is the Spider Frien...