CVE-2008-5671

CVE-2008-5671 affects Joomla! web CMS prior to 1.0.15, specifically versions 1.0.11–1.0.14. The vulnerability arises when RG_EMULATION is enabled in configuration.php, allowing a remote attacker to craft a URL that causes a PHP file to be included via the mosConfig_absolute_path parameter, leadin...

CVE-2007-5671

CVE-2007-5671 is a VMware Tools local privilege-escalation issue in the guest HGFS driver (HGFS.sys) present in VMware Workstation/Player/ACE/Server and ESX/ESXi components. The flaw arises from improper validation of arguments to user-mode IOCTLs to .\hgfs, enabling a guest user to modify kernel...

iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability

iDefense Security Advisory 06.04.08 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 04, 2008 I. BACKGROUND VMware is a software virtualization system which allows multiple virtual computers to run on a single system. VMware Tools provides drivers and utilities to enhance and optimize t...

VMSA-2008-0009:Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve CRITICAL security issues

VMSA-2008-0009.2 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0009.2 VMware Security AdvisorySynopsis: Update...

CVE-2006-5671

PHP remote file inclusion vulnerability in contact.php in Free Image Hosting 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informati...

CVE-2006-5671

CVE-2006-5671 is a PHP remote file inclusion vulnerability affecting Free Image Hosting 1.0 and earlier. The issue is triggered via the AD_BODY_TEMP parameter in contact.php, allowing an attacker to supply a URL that leads to remote PHP code execution. The vulnerability is classified with a high ...