Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter...

CVE-2007-0986

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter...

Buffer overflow

Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WSFTP 2007 Professional allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors...

Squid代理畸形FTP URL远程拒绝服务漏洞

BUGTRAQ ID: 22079 Squid是一个高效的Web缓存及代理程序，最初是为Unix平台开发的，现在也被移植到Linux和大多数的Unix类系统中。最新的Squid可以运行在Windows平台下。 Squid在处理畸形的FTP URL时存在漏洞，如果用户通过代理访问了特制的FTP URL的话，Squid就会出现core dump，导致拒绝服务。 受影响系统： Squid Web Proxy Cache 2.6 不受影响系统： Squid Web Proxy Cache 2.6.STABLE7 厂商补丁： Squid -----...

CVE-2006-5318

PHP remote file inclusion vulnerability in index.php in Nayco JASmine aka Jasmine-Web allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter...

CVE-2006-5315

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

CVE-2006-5318

CVE-2006-5318 (Nayco JASmine / Jasmine-Web) is a PHP remote file inclusion flaw in index.php that allows an attacker to execute arbitrary PHP code by supplying an FTP URL in the section parameter. The vulnerability arises from improper handling of user-supplied input and can enable code execution...

CVE-2006-5015

PHP remote file inclusion vulnerability in hit.php in Kietu 3.2 allows remote attackers to execute arbitrary PHP code via an FTP URL in the urlhit parameter...

CVE-2006-5015

CVE-2006-5015: PHP remote file inclusion in Kietu 3.2 allows remote code execution via FTP URL passed to url_hit in hit.php. Affected: Kietu 3.2; vulnerability arises from using FTP URLs in the input parameter, enabling arbitrary PHP execution. The provided documents do not include explicit remed...

ShockwaveFlash ActiveX buffer overflow

Stack overflow stack memory exhaustion on oversized hostname in AllowScriptAccess property ftp:// URL...

CVE-2006-3532

PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...

CVE-2006-2866

CVE-2006-2866 describes a PHP remote file inclusion vulnerability in DotClear

CVE-2006-1839

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...

Remote file inclusion

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...

CVE-2006-1839

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...

CVE-2006-1839

CVE-2006-1839 affects PHP Album 0.3.2.3 via a remote file inclusion in language.php. When register_globals is enabled, an attacker can supply an FTP URL to the data_dir parameter, which satisfies file_exists and can lead to arbitrary PHP code execution on the affected server. The NVD entry and mu...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2004-1948

NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list...