CVE-2007-3186: Undefined Security Weakness

Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an IFRAME, as demonstrated using a gopher URI...

Apple Safari 3 for Windows - Protocol Handler Command Injection

source: https://www.securityfocus.com/bid/24434/info Apple Safari for Windows is prone to a protocol handler command-injection vulnerability. Exploiting the issue allows remote attackers to pass arbitrary command-line arguments to any application that can be called through a protocol handler. Thi...

PHPMyDesk Beta Release 1.0b ==> RFI

script:PHPMyDesk Beta Release 1.0b == RFI dir url:http://www.cynux.com/phpmydesk/ author: titanichacker contact:[email protected] H.P : http://hack-teach.com & mohandko.com & tryag.com bug in: ./index.php include$langmod; ./login.php include$langmod; ./logout.php include$langmod;...

Mambo Component com_yanc 1.4 Beta - 'id' SQL Injection

------------------------------ ------------------------------- Mambo comyanc v1.4 beta id Blind Remote SQL Injection Vuln ------------------------------------------------------------- Bulan: Cyber-Security ------------------------------------------------------------- Exploit:...

Apple Safari - Feed URI Denial of Service

Apple Safari - Feed URI Denial of Service source: https://www.securityfocus.com/bid/24460/info Apple Safari is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions on a user's...

[Full-disclosure] Teamspeak Server 2.0.20.1 Vulnerabilities

Hi everyone, several months ago I discovered some vulnerabilities in TeamSpeak Server WebAdmin interface. I sent the advisory and exploit to the developers about two months ago 11 03 2007, but the server is still vulnerable, today. Affected software: Teamspeak Server 2.0.20.1 Looks like the beta...

Crlf injection

CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We d...

CVE-2007-2583

The indecimal::set function in itemcmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service crash via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference...

Code injection

Unspecified vulnerability in search/list/actionsearch/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the formsearchterm parameter...

CVE-2007-2579

Multiple cross-site scripting XSS vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via 1 the formmail parameter to contact/contact/index.php; the 2 formmods or 3 formsearchterm parameter to search/list/actionsearch/index.php; 4 the id parameter to...

CVE-2007-2577

Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via 1 the mode parameter to feeds.php, the 2 formcat parameter to a news/list/index.php or b certain news/details/id/actioncreate/index.php files, or 3 the formmods parameter to...

CVE-2007-2579

CVE-2007-2579 concerns ACP3 4.0 beta 3, where multiple cross-site scripting (XSS) vectors exist. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML through various parameters across the application: form[mail] to contact/contact/index.php; form[mods][], form[search_...

CVE-2007-2578

Unspecified vulnerability in search/list/actionsearch/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the formsearchterm parameter...

CVE-2007-2346

Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the APPRELATIVEPATH parameter to 1 include.php, 2 dbcommon/include.php, and 3 exception/include.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to 1 unavailable.php, 2 source.php, 3 log.php, 4 latex.php, 5 indexinfo.php, 6 index.php, 7 importinfo.php, 8 import.php, 9...

CVE-2007-2260

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to 1 unavailable.php, 2 source.php, 3 log.php, 4 latex.php, 5 indexinfo.php, 6 index.php, 7 importinfo.php, 8 import.php, 9...

CVE-2007-2260

Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the bibtexrootrel parameter to 1 unavailable.php, 2 source.php, 3 log.php, 4 latex.php, 5 indexinfo.php, 6 index.php, 7 importinfo.php, 8 import.php, 9...

CVE-2007-2260

CVE-2007-2260 affects the bibtex mase beta 2.0 package, which exposes multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the bibtexrootrel parameter to a set of PHP entry points (including unavailable.php, s...

joomla150-rfi.txt

Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in Joomla 1.5.0 Beta : File /libraries/pcl/pcltar.php, Lin...

Joomla 1.5.0 Beta (pcltar.php) Remote File Inclusion Vulnerability

No description provided by source. Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in Joomla 1.5.0 Beta :...