CVE-2008-3075

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a ZIP archive and possibly 2 the filename of the first file in a ZIP archive, which is not properly...

Information disclosure

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a tar archive and possibly 2 the filename of the first file in a tar archive, which is not properly...

Information disclosure

The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" exclamation point shell metacharacter in 1 the filename of a ZIP archive and possibly 2 the filename of the first file in a ZIP archive, which is not properly...

Remote file inclusion

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0441

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0441

CVE-2009-0441 describes a PHP remote file inclusion in TECHNOTE 7.2’s skin_shop/standard/2_view_body/body_default.php. The vulnerability occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the shop_this_skin_path parameter (a differen...

Technote 7.2 Remote File Inclusion Vulnerability

No description provided by source. TECHNOTE 7.2 08.09.25 Remote File Inclusion Vulnerability bY [email protected] / TECHNOTE VERSION 7.2 08.09.25is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability...

Technote 7.2 - Remote File Inclusion

Technote 7.2 - Remote File Inclusion TECHNOTE 7.2 08.09.25 Remote File Inclusion Vulnerability bY [email protected] / TECHNOTE VERSION 7.2 08.09.25is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion...

Technote 7.2 Remote File Inclusion

TECHNOTE 7.2 08.09.25 Remote File Inclusion Vulnerability bY [email protected] / TECHNOTE VERSION 7.2 08.09.25is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: / TEST ON...

Technote 7.2 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================ Technote 7.2 Remote File Inclusion Vulnerability ================================================ / TECHNOTE VERSION 7.2 08.09.25is bulletin board system of Korea. It is freely available for...

Technote 7.2 - Remote File Inclusion

TECHNOTE 7.2 08.09.25 Remote File Inclusion Vulnerability bY [email protected] / TECHNOTE VERSION 7.2 08.09.25is bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find Remote File Inclusion vulnerability. Here is the details: / TEST ON...

CVE-2008-2367

Red Hat Certificate System 7.2 uses world-readable permissions for password.conf and unspecified other configuration files, which allows local users to discover passwords by reading these files...

CVE-2008-2368

Red Hat Certificate System 7.2 stores passwords in cleartext in debug/log files (e.g., UserDirEnrollment log and RA wizard installer log) and uses weak file permissions, enabling local read access. The issue is fixed in Red Hat advisories RHSA-2009:0006/0007 by updating pkisetup, rhpki-* and rela...

CVE-2008-2367

CVE-2008-2367 affects Red Hat Certificate System 7.2. The root cause is insecure default file permissions on configuration files (e.g., password.conf) allowing local attackers to read sensitive credentials. Connected advisories note remediation via updated packages for Red Hat Certificate System ...

CentOS Security Advisory CESA-2009:0003 (xen)

The remote host is missing updates to xen announced in advisory CESA-2009:0003. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Solaris 5.9 (x86) : 138687-03

Portal Server 7.2 Solarisx86:Maintenance Patch. Date this patch was last updated by Sun : Jun/30/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Vim Shell Command Injection Vulnerability (Windows)

This host is installed with Vim and is prone to Command Injection Vulnerability. OpenVAS Vulnerability Test $Id: secpodvimshellcmdinjectionvulnwin900411.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Vim Shell Command Injection Vulnerability Windows Authors: Sujit Ghosal Copyright: Copyright C...

Gentoo Security Advisory GLSA 200704-22 (BEAST)

The remote host is missing updates announced in advisory GLSA 200704-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Xss In Datalife Engine CMS 7.2

Author : Hadi Kiamarsi ------------------------------------------- Discovered by : Hadi Kiamarsi ------------------------------------------- Exploited By : Hadi Kiamarsi ------------------------------------------- E-Mail : hadikiamarsiathotmail.com ------------------------------------------- CMS:...

Gentoo Security Advisory GLSA 200312-02 (Kernel)

The remote host is missing updates announced in advisory GLSA 200312-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...