CVE-2006-5439

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thir...

CVE-2006-5439

The CVE-2006-5439 issue affects Comdev Misc Tools 4.1: PHP remote file inclusion in adminfoot.php when register_globals is enabled. An attacker can execute arbitrary PHP code by supplying a crafted URL in the path[docroot] parameter. The NVD description confirms the vulnerability and impact (part...

CVE-2006-5439

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thir...

CVE-2006-5439: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thir...

CVE-2006-2021: Undefined Security Weakness

Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface ARI web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used ...

cURL/libcurl: Buffer overflow in the handling of TFTP URLs

Background cURL is a command line tool for transferring files with URL syntax, supporting numerous protocols. libcurl is the corresponding client-side library. Description Ulf Harnhammar reported a possible buffer overflow in the handling of TFTP URLs in libcurl due to the lack of boundary checks...

Axel: Vulnerability in HTTP redirection handling

Background Axel is a console-based FTP/HTTP download accelerator. Description A possible buffer overflow has been reported in the HTTP redirection handling code in conn.c. Impact A remote attacker could exploit this vulnerability by setting up a malicious site and enticing a user to connect to it...

CVE-2004-0323

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the 1 ppp parameter in viewthread.php, 2 desc parameter in misc.php, 3 tpp parameter in forumdisplay.php, 4 ascdesc parameter in forumdisplay.php, or 5 the addon...

CVE-2004-1863

Multiple cross-site scripting XSS vulnerabilities in XMB aka extreme message board 1.9 beta aka Nexus beta allow remote attackers to inject arbitrary web script or HTML via 1 the u2uheader parameter in editprofile.php, the restrict parameter in 2 member.php, 3 misc.php, and 4 today.php, and 5 an...