JVN#93484133 TeraStation HD-HTGL series cross-site request forgery vulnerability

Impact If a TeraStation HD-HTGL administrator who logged into the web administration interface views a malicous website, an attacker could possibly modify configurations or delete data on the hard disk. Solution Products Affected HD-HTGL Series firmware Ver. 2.05-beta-1 and earlier...

CVE-2006-5095

MyPhotos 0.1.3b beta is affected by a PHP remote file inclusion in index.php via the includesdir parameter. The underlying issue is that user-provided includesdir is used in a way that allows an attacker to cause arbitrary PHP code execution. PT-Security notes a workaround: for this version, temp...

CVE-2006-5079

Summary: CVE-2006-5079 is a PHP remote file inclusion vulnerability in the class.mysql.php component of Matt Humphrey’s paBugs 2.0 Beta 3 and earlier. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in the path_to_bt_dir parameter. The CVSSv2 base metrics suggest netw...

PT-2006-5833 · Myphotos · Myphotos

Name of the Vulnerable Software and Affected Versions: MyPhotos version 0.1.3b beta Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via the includesdir parameter. Recommendations: For MyPhotos version 0.1.3b beta, as a temporary...

CVE-2006-5054

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...

CVE-2006-5033

Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding...

CVE-2006-5033

The CVE-2006-5033 entry describes an unspecified vulnerability in Paul Smith Computer Services’ vCAP 1.9.0 Beta and earlier, specifically in StoresAndCalendarsList.cgi, allowing remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers o...

paBugs <= 2.0 Beta 3 (class.mysql.php) Remote File Include Exploit

No description provided by source. ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+...

paBugs 2.0 Beta 3 - 'class.mysql.php' Remote File Inclusion

?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++ +++:++ +++:++++: ++ +:+ ++ ...

paBugs 2.0 Beta 3 - class.mysql.php Remote File Inclusion

paBugs 2.0 Beta 3 - class.mysql.php Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:...

vcap.txt

title: vCAP calendar server Multiple vulnerabilities Author: securma massine MorX Security Research Team http://www.morx.org Product info : vCAP www.pscs.co.ukis a network calendar server for Windows. vCAP allows user to create calendars which can be viewed and modified by people on network using...

solpot-adv-05.txt

SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt Greetz: choi , h4ntu , Ibnusina ,...

EUVD-2006-4065

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

CVE-2006-4073

CVE-2006-4073 affects Fabian Hainz’s phpCC Beta 4.2. The issue is multiple PHP remote file inclusion through the base_dir parameter in login.php, reactivate.php, and register.php, allowing remote code execution. The core cause is improper handling of base_dir leading to inclusion of attacker-cont...

CVE-2006-4063

The CVE affects Csaba Godor SAPID Blog Beta 2 and earlier, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code via URL-based parameters. Specifically, the vulnerabilities are triggered in (a) usr/extensions/get_blog_infochannel.inc.php, (b) usr...

SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion

SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt Greetz: choi , h4ntu , Ibnusina ,...

SAPID Blog Beta 2 - ROOT_PATH Remote File Inclusion

SAPID Blog Beta 2 - ROOTPATH Remote File Inclusion $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ SAPID Blog = Beta 2 rootpath Remote File Include Vulnerability $$ Script site: http://sapid.sourceforge.net/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ ...

phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpCC 4.2 beta basedir Remote File Inclusion Vulnerability ============================================================= SolpotCrew Community phpCC - Beta 4.2 basedir Remote Fil...

SAPID Blog <= beta 2 (root_path) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== SAPID Blog = beta 2 rootpath Remote File Include Vulnerabilities ==================================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST...