3980 matches found
PHP Live Helper 1.x - 'abs_path' Remote File Inclusion
--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...
PHP Live Helper <= 1.x (abs_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHP Live Helper = 1.x abspath Remote File Include Vulnerability ===================================================================...
PHP Live Helper 1.x - abs_path Remote File Inclusion
PHP Live Helper 1.x - abspath Remote File Inclusion --------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author :...
CVE-2006-2444
The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...
CVE-2006-2444
The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...
CVE-2006-2444
CVE-2006-2444 affects the Linux kernel SNMP NAT Netfilter processing. The vulnerability in snmp_trap_decode (kernel = 2.6.16.18) or applying vendor patches where applicable. No additional exploitation details are provided in the documents.
CVE-2006-2444: Undefined Security Weakness
The snmptrapdecode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service crash via unspecified remote attack vectors that cause failures in snmptrapdecode that trigger 1 frees of random memory or 2 frees of previously-freed memory...
Cross site scripting
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
CVE-2006-2394
CVE-2006-2394 affects PHP Live Helper’s chat.php, where the PHPSESSID parameter enables cross-site scripting. The vulnerability allows remote attackers to inject arbitrary web script or HTML in the context of the affected site. Public references (including Exploit-DB) document a browser-executabl...
CVE-2006-2394: Undefined Security Weakness
Cross-site scripting XSS vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter...
PHP Live Helper ASP(chat.php) XSS
================== Credit: Mr-X Site: www.alshmokh.com Email: [email protected] ================== Example:- /chat.php?action=showmain&PHPSESSID=XSS...
beagle insecure command line construction
CESA-2006-002 - rev 1 See all my vulnerabilities at http://scary.beasts.org/security beagle insecure command line construction Programs affected: beagle-0.2.4 and older. Severity: Command line argument injection to helper applications. Fixed: beagle-0.2.5 CVE identifiers: CVE-2006-1865 beagle is ...
CVE-2006-1865
Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing...
CVE-2006-1865
Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing...
CVE-2006-1865: Improper Neutralization of Argument Delimiters in a Command
Argument injection vulnerability in Beagle before 0.2.5 allows attackers to execute arbitrary commands via crafted filenames that inject command line arguments when Beagle launches external helper applications while indexing...
Directory traversal
Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...
CVE-2006-1478
Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...
CVE-2006-1478
CVE-2006-1478 affects Turnkey Web Tools PHP Live Helper 1.8 (and possibly later versions). The vulnerability is a directory traversal in (1) initiate.php and possibly other PHP scripts, allowing remote authenticated users to include and execute arbitrary local files. The attack relies on crafted ...