b2evolution-rfi.txt

Severity: High Title: b2evolution Remote File inclusion Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.5 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - - -...

b2evolution.txt

Security Advisory Severity: Medium Title: b2evolution XSS Vulnerability Date: 28.11.06 Author: tarkus tarkus at tiifp dot org Web: https://tiifp.org/tarkus Vendor: b2evolution http://b2evolution.net/ Affected Products: b2evolution 1.8.2 - 1.9 beta - - - - - - - - - - - - - - - - - - - - - - - - -...

CVE-2006-6078

CVE-2006-6078 : PHP remote file inclusion in the a-ConMan 3.2 beta package. The vulnerability is in common.inc.php, allowing remote attackers to execute arbitrary PHP code by supplying a URL in the cm_basedir parameter. Documented impact is arbitrary code execution via crafted input; exploitation...

[SA22925] EC-CUBE Unspecified Cross-Site Scripting Vulnerability

TITLE: EC-CUBE Unspecified Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA22925 VERIFY ADVISORY: http://secunia.com/advisories/22925/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: EC-CUBE 1.x http://secunia.com/product/12657/ DESCRIPTION: A...

CVE-2006-5634

CVE-2006-5634 is associated with PHP remote file inclusion in phpProfiles. Connected records document additional PHP RFI vulnerabilities in phpProfiles 3.1.2b and earlier, with multiple vectors across include/body.inc.php, body_admin.inc.php, menu files, and various incpath parameters. The core i...

CVE-2006-5612

CVE-2006-5612 describes a PHP remote file inclusion in GestArt beta 1, specifically in aide.php3 (also known as aide.php). When register_globals is enabled, the aide parameter can be exploited to execute arbitrary PHP code, i.e., a remote code execution vulnerability. The issue is tied to GestArt...

phpProfiles 2.1 Beta Multiple Remote File Include Vulnerabilities

No description provided by source. ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download : http://sourceforge.net/project/showfiles.php?groupid=176310 Version : v.2...

phpProfiles 2.1 Beta - Multiple Remote File Inclusions

phpProfiles 2.1 Beta - Multiple Remote File Inclusions ================================================================== phpProfiles RFI ================================================================== Info:- Scripts: phpProfiles download :...

MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MHL-2006-003 - Public Advisory +-----------------------------------------------------------+ | ezOnlineGallery Multiple Security Issues | +-----------------------------------------------------------+ PUBLISHED ON October 26th, 2006 PUBLISHED AT...

BSD (telnetd) Remote Root Exploit

No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...

WGCC Beta <= 0.5.6 (quiz.php) Remote SQL InJection Vulnerability

Title : WGCC Beta = 0.5.6 quiz.php Remote SQL InJection Vulnerability Author : ajann Dork : "Web Group Communication Center beta 0.5.6/0.5.5/.." Greetz : Tm, Mslman, Aleminin, Ramazan, Bayram., MUBAREK, Olsun --Login Before Injection Inject http://target.com/path/quiz.php?action=show&qzid=SQL...

WGCC 0.5.6b - 'quiz.php' SQL Injection

Title : WGCC Beta Login Before Injection Inject http://target.com/path/quiz.php?action=show&qzid=SQL INJECTION Example: quiz.php?action=show&qzid=-1%20union%20select%200,0,0,0,username,passwort,email,0,0,0,0,0,0,0,0%20from%20wgccuser%20where%20userid=1 ++ userid=1 Change This Crack MD5 HASH /Inje...

Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin

Rapid7 Advisory R7-0026 HTTP Header Injection Vulnerabilities in the Flash Player Plugin Published: Oct 17, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0026.jsp 1. Affected Systems: KNOWN VULNERABLE: o Flash Player plugin 9.0.16 for Windows o Flash Player plugin 7.0.63 for Linux PROBAB...

EUVD-2006-5299

PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...

CVE-2006-5314

CVE-2006-5314 affects TribunaLibre 3.12 Beta. The vulnerability is a PHP remote file inclusion in ftag.php, exploitable by providing a URL in the mostrar parameter, allowing remote attackers to execute arbitrary PHP code on the server. The issue stems from improper handling of external input in t...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

zenphoto1.0.2.txt

Vendor: zenphoto Vulnerable: zenphoto 1.0.2 beta and below The vendor has been warned and the vulnerabilities have been addressed in 1.0.3 beta. Path Disclosure --------------- http://www.example.com/photos/zen/i.php?a=EXISTINGALBUMNAME&i=EXISTINGIMAGENAME&s=thumb%00 which returns: Warning:...

TribunaLibre 3.12 Beta - ftag.php Remote File Inclusion

TribunaLibre 3.12 Beta - ftag.php Remote File Inclusion Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For...

TribunaLibre 3.12 Beta (ftag.php) Remote File Include Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

PT-2006-5910 · Buffalo · Buffalo Terastation Hd-Htgl

Name of the Vulnerable Software and Affected Versions: Buffalo TeraStation HD-HTGL firmware versions prior to 2.05 beta 1 Description: A cross-site request forgery issue exists in the administrative interface, allowing remote attackers to modify configurations or delete arbitrary data...