6534 matches found
CVE-2006-4250: Undefined Security Weakness
Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...
Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution
Exploit for unknown platform in category web applications ===================================================================== Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | |...
Debian DSA-1278-1 : man-db - buffer overflow
A buffer overflow has been discovered in the man command that could allow an attacker to execute code as the man user by providing specially crafted arguments to the -H flag. This is likely to be an issue only on machines with the man and mandb programs installed setuid. %NASLMINLEVEL 70300 C...
[SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1278-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 06, 2007 -...
[SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1278-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 06, 2007 - ------------------------------------------------------------------------ Package : man-db Vulnerability...
DSA-1278-1 man-db - buffer overflow
Bulletin has no description...
Remote file inclusion
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-1778: Undefined Security Weakness
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-1708: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2007-1620
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...
CVE-2007-1620
CVE-2007-1620: Affects PHP DB Designer 1.02 and earlier. Multiple remote PHP File Inclusion vulnerabilities allow an attacker to craft a URL that sets _SESSION[SITE_PATH] (to wind/help.php or wind/about.php) or _SESSION[DRIVER] (to db/session.php), enabling remote code execution via an included P...
CVE-2007-1620: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...
CVE-2007-1620
Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSITEPATH parameter to a wind/help.php or b wind/about.php, or the 2 SESSIONDRIVER parameter to c db/session.php...
PHP DB Designer <= 1.02 Remote File Include Exploit
PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:Path/db/session.php?SESSIONDRIVER=Shell...
PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
No description provided by source. PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...
PHP DB Designer <= 1.02 Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== PHP DB Designer = 1.02 Remote File Include Vulnerabilities =========================================================== PHP DB Designer = 1.02 Remote File Include Exploit D.Script:...
PHP DB Designer 1.02 - Remote File Inclusion
PHP DB Designer 1.02 - Remote File Inclusion PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group...
PHP DB Designer 1.02 - Remote File Inclusion
PHP DB Designer = 1.02 Remote File Include Exploit D.Script: http://sourceforge.net/projects/phpdbdesigner/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit:Path/db/session.php?SESSIONDRIVER=Shell...
PT-2007-2850 · Php · Php Photo Album
Name of the Vulnerable Software and Affected Versions: PHP Photo Album versions prior to 0.3.2.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the db file parameter in the common.php file. It is noted that versions 0.3.2.6 and 0.4.1beta do not contain...