CVE-2008-2974

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

CVE-2008-2973

CVE-2008-2973 involves multiple XSS vulnerabilities in the chathead.php component of MM Chat 1.5. The flaws allow remote attackers to inject arbitrary web script or HTML via the sitename and wmessage parameters. The provided documents confirm the vulnerability details but do not include any remed...

CVE-2008-2974

MM Chat 1.5 is affected by a Directory Traversal in chatconfig.php. When register_globals is enabled, remote attackers can use directory traversal sequences in the currentlang parameter to include and execute local files. CVSS v2 base score is 6.8 (MEDIUM). Affected: MM Chat 1.5; exploit details ...

CVE-2008-2974

Directory traversal vulnerability in chatconfig.php in MM Chat 1.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter...

MM Chat 1.5 目录遍历漏洞

No description provided by source...

MM Chat 1.5 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MM Chat 1.5 LFI/XSS Multiple Remote Vulnerabilities ===================================================== -----------------------------------------------------------------------------¬...

mm chat 1.5 - Local File Inclusion Cross-Site Scripting

mm chat 1.5 - Local File Inclusion Cross-Site Scripting ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From T...

mmchat-lfixss.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

kernel security and bug fix update

2.6.18-53.1.21.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki ORA 6045759 - NET Fix msi issue with kexec/kdump Michael Chan ORA 6219364 - MM Fix allocpagesnode static 'nid' race made kernel crash Joe Jin ORA 6187457 - splice Fix bad unlockpage in error case Jens Axboe ORA 626357...

Debian: Security Advisory (DSA-137)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-3739

mm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion from entering into reserved kernel page memory, which allows local users to cause a denial of service OOPS via unspecified vectors...

Microsoft .NET Framework JIT Compiler Remote Buffer Overflow Vulnerability

Description Microsoft .NET Framework is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of a user running the application. Successful exploits ca...

WEBInsta MM 1.3e - 'absolute_path' Remote File Inclusion

WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value; exploit.cmd.value=document.exploit.cmd.value;...

CVE-2006-0190

Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service panic via unspecified vectors, possibly involving functions from the mm driver...

Code injection

Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service panic via unspecified vectors, possibly involving functions from the mm driver...

CVE-2006-0190

Technical details are not publicly available in the provided documents for CVE-2006-0190. Monitor for updates.

CVE-2006-0190

Unspecified vulnerability in Sun Solaris 9 and 10 for the x86 platform allows local users to gain privileges or cause a denial of service panic via unspecified vectors, possibly involving functions from the mm driver...

[SA18216] Linux Kernel Multiple Vulnerabilities

TITLE: Linux Kernel Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18216 VERIFY ADVISORY: http://secunia.com/advisories/18216/ CRITICAL: Less critical IMPACT: Unknown, DoS WHERE: Local system OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Some vulnerabilities...

DEBIAN-CVE-2005-3342

noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...

Avotus mm File Retrieval attempt

The script attempts to force the remote Avotus CDR mm service to include the file /etc/passwd across the network. OpenVAS Vulnerability Test $Id: avotusmm.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Avotus mm File Retrieval attempt Authors: Anonymous Copyright: Copyright C 2004 Anonymous...