CVE-2008-6287

Broadcast Machine 0.1 is vulnerable to multiple PHP remote file inclusion (RFI) flaws in controllers/. The baseDir parameter in (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php can be abused to execute arbitrary PHP code ...

CVE-2007-6287

CVE-2007-6287 is a cross-site scripting (XSS) vulnerability in the login page of HyperVM 2.0 by Lxlabs, where an attacker can inject arbitrary script via the frm_emessage parameter. This entry describes a different vector than CVE-2006-6649 and notes the provenance of the information as unknown a...

CVE-2007-6287

Cross-site scripting XSS vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or HTML via the frmemessage parameter, a different vector than CVE-2006-6649. NOTE: the provenance of this information is unknown; the details are obtained solely...

Buffer overflow

Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the 1 File1 and 2 Title1 fields, different vectors than CVE-2006-6287 and CVE-2007-2487...

Stack overflow

Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP3 file, a different vector than CVE-2006-6287...

CVE-2006-6287

Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U file...

CVE-2006-6287

CVE-2006-6287 describes a stack-based buffer overflow in AtomixMP3 2.3 and earlier exploitable via a long pathname in an M3U file. Connected records show related, distinct vectors for AtomixMP3: CVE-2007-2487 covers a stack-based overflow via a long filename in an MP3 file (different vector); CVE...