2062 matches found
CVE-2006-6533: Undefined Security Weakness
Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...
GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH
The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...
Barman 0.0.1r3 (interface.php) Remote File Include Vulnerability
No description provided by source. DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Barman 0.0.1r3 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://downloads.sourceforge.net/barman/Barman-0.0.1r3.tgz Discoverd By = DeltahackingTEAM User In Delta Team =...
Barman 0.0.1r3 (interface.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ Barman 0.0.1r3 interface.php Remote File Include Vulnerability ================================================================ Portal Name = Barman 0.0.1r3 Class = Remote Fi...
Barman 0.0.1r3 - Interface.php Remote File Inclusion
Barman 0.0.1r3 - Interface.php Remote File Inclusion DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Barman 0.0.1r3 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://downloads.sourceforge.net/barman/Barman-0.0.1r3.tgz Discoverd By = DeltahackingTEAM User In...
CVE-2006-6390: Undefined Security Weakness
Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the configdbtype parameter to 1 categories.php, 2 couriers.php, 3...
Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...
ME Download System <= 1.3 (header.php) Remote Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........:...
phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion
No description provided by source. +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2....
PHPWebThings 1.5.2 - editor.php Remote File Inclusion
PHPWebThings 1.5.2 - editor.php Remote File Inclusion +------------------------------------------------------------------------------------------- + phpWebThings 1.5.2 editor.php Remote File Include Vulnerability...
phpWebThings <= 1.5.2 (editor.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== phpWebThings +------------------------------------------------------------------------------------------- + Details: + phpWebThings 1.5.2 core/editor.php does not...
PHPWebThings 1.5.2 - 'editor.php' Remote File Inclusion
+------------------------------------------------------------------------------------------- + phpWebThings 1.5.2 editor.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: phpWebThings 1.5.2 +...
CVE-2006-5735: Undefined Security Weakness
Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the language parameter, related to register.php storing a language value in the users table...
MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected...
CVE-2006-5658: Undefined Security Weakness
BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...
CVE-2006-5658
BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...
MODx CMS <= 0.9.2.1 (FCKeditor) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= MODx CMS include $basepath."manager/media/browser/mcpuk/connectors/php/Command...
MODx CMS 0.9.2.1 (base_path) Remote File Include Vulnerability
+------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: MODx CMS 0.9.2.1 + Vendor...
MODx CMS 0.9.2.1 - 'FCKeditor' Remote File Inclusion
+------------------------------------------------------------------------------------------- + MODx CMS 0.9.2.1 basepath Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: MODx CMS 0.9.2.1 + Vendor...
CVE-2006-5528: Undefined Security Weakness
Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter. NOTE: some of these details are obtained from third party information...