CVE-2006-5839

CVE-2006-5839 : A PHP remote file inclusion vulnerability in PHPAdventure 1.1-Alpha and earlier, due to ad_main.php processing the _mygamefile parameter, allows remote attackers to execute arbitrary PHP code via a URL. Affected software: PHPAdventure

IrayoBlog 0.2.4 - incirayofuncs.php Remote File Inclusion

IrayoBlog 0.2.4 - incirayofuncs.php Remote File Inclusion WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :irayoblog-alpha-0.2.4 Class = Remote File Inclusion ; Download =http://ovh.dl.sourceforge.net/sourceforge/irayoblog/irayoblog-alpha-0.2.4.tar.gz Found by =...

Tru64 5 (su) Env Local Stack Overflow Exploit

No description provided by source. / Copyright c 2000 ADM / / All Rights Reserved / / THIS IS UNPUBLISHED PROPRIETARY SOURCE CODE OF ADM / / The copyright notice above does not evidence any / / actual or intended publication of such source code. / / / / Title: Tru64 5 su / / Tested under: Tru64 5...

[SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1196-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 19th, 2006 http://www.debian.org/security/faq -...

CVE-2006-5027

Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct request for php/main/phplib files 1 dbmsql.inc, 2 dbmssql.inc, 3 dbmysql.inc, 4 dboci8.inc, 5 dbodbc.inc, 6 dboracle.inc, and 7 dbpgsql.inc; and 8 dbsybase.inc, which reveals the pa...

CVE-2006-4545

PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the SERVER parameter in 1 admin/avatar.php, 2 libs/archive.class.php, 3 libs/login.php, 4 libs/profiles.class.php, and 5 libs/profile/proccess.php. NOTE: CVE disputes thi...

CVE-2006-4545: Undefined Security Weakness

PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the SERVER parameter in 1 admin/avatar.php, 2 libs/archive.class.php, 3 libs/login.php, 4 libs/profiles.class.php, and 5 libs/profile/proccess.php. NOTE: CVE disputes thi...

CVE-2006-4545

ModuleBased CMS Pre-Alpha is affected by a PHP remote file inclusion risk in multiple files (admin/avatar.php, libs/archive.class.php, libs/login.php, libs/profiles.class.php, libs/profile/proccess.php) via the _SERVER parameter. The underlying concern is that the _SERVER array and _SERVER[DOCUME...

PT-2006-5338 · Modulebased · Modulebased Cms

Name of the Vulnerable Software and Affected Versions: ModuleBased CMS Pre-Alpha Description: The issue allows remote attackers to execute arbitrary PHP code via the SERVER parameter in several files, including "admin/avatar.php", "libs/archive.class.php", "libs/login.php",...

CVE-2006-4537

NET$SESSIONCONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file...

pHNews alpha 1 - templates_dir Remote Code Execution

pHNews alpha 1 - templatesdir Remote Code Execution !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: ::...

TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow

TIBCO Rendezvous 7.4.11 - add router Remote Buffer Overflow / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win32 public version Affected products: Tibco RendezOVous version =7.4.11 Multiple Vulnerabilities Author: Andres Tarasco Acuña atarasco @ sia.es Advisory: http://www.514.es...

[SA21705] OpenVMS Session Control Password Disclosure Security Issue

---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available:...

CVE-2006-4329: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1153-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2006 http://www.debian.org/security/faq -...

WTcom <= 0.2.4-alpha (torrents.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== WTcom Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081...

[SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1142-1 [email protected] http://www.debian.org/security/ Martin Schulze August 4th, 2006 http://www.debian.org/security/faq -...

Mambo Component Mam-Moodle alpha - Remote File Inclusion

Mambo Component Mam-Moodle alpha - Remote File Inclusion Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path...

Mam-Moodle Mambo Component alpha Remote Inclusion Vulnerability

No description provided by source. Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path:...

[SECURITY] [DSA 1110-1] New samba packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1110-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 16th, 2006 http://www.debian.org/security/faq -...