CVE-2015-6008

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database aka refbase through 0.9.6 allow remote attackers to execute arbitrary PHP code via the 1 pathToMYSQL or 2 databaseStructureFile parameter, a different issue than CVE-2015-6008...

CVE-2015-6008

install.php in Web Reference Database aka refbase through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381...

CVE-2015-6008

CVE-2015-6008 affects Web Reference Database (refbase) install.php up to version 0.9.6. A remote attacker can execute arbitrary PHP code by manipulating the adminPassword parameter, enabling remote code execution. This is a confirmed vulnerability entry with corroborating references indicating a ...

CVE-2014-6008

The CVE-2014-6008 entry pertains to the Blitz Bingo (com.appMobi.sbbingo.app) Android 2.3 app where SSL connections do not verify X.509 certificates. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, with the affected component be...

CVE-2008-6008

hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb...

CVE-2008-6008

CVE-2008-6008 affects the hyBook Guestbook Script. The issue is insufficient access control that stores sensitive information under the web root, enabling remote attackers to download a database file (hyBook.mdb) via a direct request. The database reportedly contains a password. The connected doc...

Debian: Security Advisory (DSA-1217-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-6008

CVE-2007-6008 describes a heap-based buffer overflow in emlsr.dll before version 2.0.0.4 used by Autonomy (Verity) KeyView components (Viewer, Filter, and Export SDK). The flaw allows remote code execution via a long Content-Type header line in an EML file. Affected software is Autonomy/Verity Ke...

CVE-2006-6008

CVE-2006-6008 covers ftpd in Linux Netkit (linux-ftpd) 0.17 (and possibly other versions) where return statuses of seteuid, setgid, and setuid are not checked. This can allow remote authenticated users to gain privileges if these calls fail (e.g., PAM failures or resource limits). This is describ...