287 matches found
NEWSolved Lite 1.9.2 - 'abs_path' Remote File Inclusion
+-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above + Venedor ...........:...
MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability
+-------------------------------------------------------------------- + + MyNewsGroups : v. 0.6b = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: MyNewsGroups : v. 0.6b + Venedor ...........: http://mynewsgroups.sourceforge.n...
TSEP 0.942 - copyright.php Remote File Inclusion
TSEP 0.942 - copyright.php Remote File Inclusion +-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Clas...
PHPAuction 2.1 (phpAds_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ PHPAuction 2.1 phpAdspath Remote File Inclusion Vulnerability ================================================================...
TSEP 0.942 - 'copyright.php' Remote File Inclusion
+-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class .............: Remote File Inclusion + Risk...
phpAuction 2.1 - 'phpAds_path' Remote File Inclusion
+-------------------------------------------------------------------- + + PHPAuction 2.1 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPAuction 2.1 maybe higher + Venedor ...........: http://www.phpauction.net, + Class...
MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== MyNewsGroups = 0.6b myngroot Remote Inclusion Vulnerability ===============================================================...
CVE-2006-3391
The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler...
[Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability
Kurdish Security Advisory MF Piadas 1.0 Remote File Include Vulnerability "Ey Tarih ya sana basarilar atfedecegiz ya da seni yasanmamis sayacagiz ." Abdullah Ocalan STOP THE MASSACRE IN THE TURKEY! FREEDOM FOR KURDISTAN ! Contact : irc.gigachat.net kurdhack & www.PatrioticHackers.com &...
Directory traversal
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the glsession cookie of users.php, which is stored in error.log...
Monster Top List 1.4 - 'functions.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/17546/info Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution
Gallery web-based photo gallery remote file execution Digital Armaments advisory is 02.14.2006 http://www.digitalarmaments.com/2006140293402395.html I. Background Gallery is a slick Web-based photo album written using PHP. It is easy to install, includes a config wizard, and provides users with t...
Carello detection
Carello.dll was found on your web server. Versions up to 1.3 of this web shopping cart allowed anybody to run arbitrary commands on your server. Note that no attack was performed, and the version number was not checked, so this might be a false alert OpenVAS Vulnerability Test $Id: carello.nasl...
USN-115-1: Kommander vulnerability
Eckhart Wörner discovered that Kommander opens files from remote and possibly untrusted locations without user confirmation. Since Kommander files can contain scripts, this would allow an attacker to execute arbitrary code with the privileges of the user opening the file. The updated Kommander wi...
PHPMyVisites 1.3 - 'Set_Lang' File Inclusion
source: https://www.securityfocus.com/bid/13370/info phpMyVisites allows attackers to include arbitrary files. While it has been demonstrated that local files may be included through this vulnerability, there is an unconfirmed possibility of remote file inclusion. Exploitation could disclose loca...
PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP mcNews Version: 1.3 Homepage: http://www.phpforums.net/index.php?dir=dld Author: Filip Groszynski VXSfx Date: 7 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in mcNews/admin/header.php: ? //...
CVE-2004-1928
The image upload feature in Tiki CMS/Groupware TikiWiki 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wikiup URL...
Samba 2.2.8 (Linux Kernel 2.6 / Debian / Mandrake) - Share Privilege Escalation
source: https://www.securityfocus.com/bid/9619/info A local privilege escalation vulnerability has been reported to affect the 2.6 Linux kernel. The issue appears to exist due to a lack of sufficient sanity checks performed when executing a file that is hosted on a remote Samba share. An attacker...
CVE-2004-0016
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files...
HotNews 0.x - 'hotnews-engine.inc.php3?config[header]' Remote File Inclusion
source: https://www.securityfocus.com/bid/9357/info HotNews is prone to multiple file include vulnerabilities. This will permit remote attackers to cause malicious PHP scripts from attacker-controlled servers to be included and subsequently executed in the context of the web server hosting the...