8 matches found
EUVD-2006-4197
Malware in sbrugna...
CVE-2006-4557
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis...
CVE-2006-4557
CVE-2006-4557 affects Bob Jewell Discloser 0.0.4, specifically the plugins/plugins.php file. The vulnerability allows remote code execution via a URL in the type parameter, with ongoing dispute about whether the attacker can actually control type. The CVE notes partial/conditional impact and that...
PT-2006-5350 · Bob Jewell · Bob Jewell Discloser
Name of the Vulnerable Software and Affected Versions: Bob Jewell Discloser version 0.0.4 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the type parameter in the plugins/plugins.php file. However, there is a dispute about whether an attacker can control...
CVE-2006-4557: Undefined Security Weakness
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis...
CVE-2006-4207
CVE-2006-4207 affects Bob Jewell Discloser 0.0.4 and earlier. The vulnerability involves multiple PHP remote file inclusion via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php, enabling an attacker to potentially execute arbitrary PHP code. Exploitation details...
CVE-2006-4207
Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to 1 content/content.php or 2 /inc/indexhead.php...
CVE-2006-4207: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to 1 content/content.php or 2 /inc/indexhead.php...