3506 matches found
Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
CVE-2006-5492
Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...
CVE-2006-5492
Technical details for CVE-2006-5492 are not publicly available in the provided documents. No affected products, components, or exploit specifics are disclosed here. Monitor for updated information from official sources.
CVE-2006-5492
Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...
JVN#39103264 Owl SQL injection vulnerability
Impact A remote attacker may modify or steal the database contents. Solution Products Affected Owl version 0.90 and earlier...
CVE-2006-4001
Login.pm in Barracuda Spam Firewall BSF 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password...
CVE-2006-4001
CVE-2006-4001 concerns Barracuda Spam Firewall (BSF): affected firmware versions 3.3.01.001–3.3.03.053 contain a hard-coded password for the guest account, enabling remote attackers to read sensitive data such as e-mail logs and potentially e-mail contents and the admin password. Related connecte...
CVE-2006-3675
Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents...
CVE-2006-3675: Undefined Security Weakness
Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents...
JVN#55425662: MyWeb SQL injection vulnerability
Impact A remote attacker could view or modify the database contents. Solution Products Affected MyWeb Portal Office cellular phone functionality MyWeb Standard Edition MyWeb Public Edition MyWeb Medical Edition MyWeb Citizen Edition MyWeb School Edition MyWeb Light Edition...
USN-248-2: unzip regression fix
USN-248-1 fixed a vulnerability in unzip. However, that update inadvertedly changed the field order in the contents listing output, which broke unzip frontends like file-roller. The updated packages fix this regression...
CVE-2006-0564: Undefined Security Weakness
Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field...
Oracle Text SQL injection vulnerability
Overview Oracle Text is vulnerable to SQL injection, which could allow a remote attacker to execute arbitrary SQL commands on a vulnerable Oracle installation. Description According to Oracle:Oracle Text uses standard SQL to index, search, and analyze text and documents stored in the Oracle...
CVE-2006-0374
Advantage Century Telecommunication ACT P202S IP Phone 1.01.21 running firmware 1.1.21 has multiple undocumented ports available, which 1 might allow remote attackers to obtain sensitive information, such as memory contents and internal operating-system data, by directly accessing the VxWorks WDB...
CVE-2006-0133
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...
CVE-2006-0133
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. dot dot in the argument to 1 getCommand.new aka getCommand and 2 getShell, a different vulnerability than CVE-2005-4273...
CVE-2006-0133
CVE-2006-0133 covers multiple directory-traversal flaws in IBM AIX 5.3 ML03 that allow local users to determine file existence and read partial contents via ".." in the arguments to getCommand.new (getCommand) and getShell. The related CVEs and records confirm the affected platform is IBM AIX 5.3...
Directory traversal
Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. dot dot in the dir parameter...