CVE-2007-4838

Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a 1 0x21, 2 0x22, or 3 0x23 packet...

CVE-2007-4832

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

Format string

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

CVE-2007-4832

CVE-2007-4832 affects CellFactor Revolution (≤1.03). It is a format-string vulnerability in a nickname field that enables remote code execution. Reported CVSSv2 base score 7.5 (HIGH) with network access and minimal user interaction. Public references detail the vulnerability, but no remediation v...

CVE-2007-4838

Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a 1 0x21, 2 0x22, or 3 0x23 packet...

CVE-2007-4838

Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a (1) 0x21, (2) 0x22, or (3) 0x23 packet. The affected software is CellFactor Revolution (version 1.03 and earlier). The vulnerability is described across the ...

CVE-2007-4832

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

CVE-2007-4838: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a 1 0x21, 2 0x22, or 3 0x23 packet...

CVE-2007-4832: Use of Externally-Controlled Format String

Format string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a malformed nickname...

CellFactor REvolution 1.03 - Multiple Remote Code Execution Vulnerabilities

CellFactor REvolution 1.03 - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/25625/info CellFactor: Revolution is prone to multiple remote code-execution vulnerabilities, including a buffer-overflow issue and a format-string issue. Successfully exploiting...

Telecom Italy Alice Messenger - Remote Registry Key Manipulation

Telecom Italy Alice Messenger - Remote Registry Key Manipulation group="HKEYLOCALMACHINE" section="SOFTWARE\Microsoft\Windows\CurrentVersion\Run" key="sun-tzu" valType=1 'REGSZ value="""c:\windows\system32\cmd.exe"" /c net user sun tzu /add & net localgroup Administrators sun /add & sc config...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

CVE-2007-2201

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

CVE-2007-2201

CVE-2007-2201 describes multiple PHP remote file inclusion vulnerabilities in Post Revolution versions 6.6 and 7.0 RC2. An attacker can cause arbitrary PHP code execution by supplying a URL in the dir parameter to either the file path common.php or themes/default/preview_post_completo.php. The af...

CVE-2007-2201

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

postrev-rfi.txt

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

Post Revolution Remote File Inclusion

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

CVE-2007-2201: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...

Post REvolution 0.7.0 RC 2 - dir Remote File Inclusion

Post REvolution 0.7.0 RC 2 - dir Remote File Inclusion Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact...