[SA21574] Mambo bigAPE-Backup Component File Inclusion Vulnerability

TITLE: Mambo bigAPE-Backup Component File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21574 VERIFY ADVISORY: http://secunia.com/advisories/21574/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: bigAPE-Backup 1.x component for Mambo http://secunia.com/product/11615/...

[SA21593] NES Game & NES System "phphtmllib" File Inclusion

TITLE: NES Game & NES System "phphtmllib" File Inclusion SECUNIA ADVISORY ID: SA21593 VERIFY ADVISORY: http://secunia.com/advisories/21593/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: NES Game & NES System http://secunia.com/product/11630/ DESCRIPTION: Kacper has...

Echo Security Advisory 2006.42

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV42$2006 --------------------------------------------------------------------------------------------------- ECHOADV42$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

[SA21446] XFree86 PCF Integer Overflow Vulnerabilities

TITLE: XFree86 PCF Integer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA21446 VERIFY ADVISORY: http://secunia.com/advisories/21446/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: XFree86 4.5.x http://secunia.com/product/4870/ XFree86 4.4.x...

[SA21526] PHProjekt "path_pre"/"lib_path" File Inclusion Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

Peoplebook Mambo Component <= v1.0 Remote File Include Vulnerabilities

--------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : August, 14th 2006 Location : Indonesia, Jakarta...

Mambo Component Peoplebook 1.0 - Remote File Inclusion

Mambo Component Peoplebook 1.0 - Remote File Inclusion --------------------------------------------------------------------------- Peoplebook Mambo Component = v1.0 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Da...

Mambo Peoplebook Component 1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Mambo Peoplebook Component 1.0 Remote File Include Vulnerability ================================================================...

alsaplayer -- multiple vulnerabilities

Luigi Auriemma reports three vulnerabilities within alsaplayer: The function which handles the HTTP connections is vulnerable to a buffer-overflow that happens when it uses sscanf for copying the URL in the Location's field received from the server into the redirect buffer of only 1024 bytes...

[SA21375] Torbstoff News "pfad" File Inclusion Vulnerability

TITLE: Torbstoff News "pfad" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21375 VERIFY ADVISORY: http://secunia.com/advisories/21375/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Torbstoff News 4.x http://secunia.com/product/11250/ DESCRIPTION: SHiKaA has...

[SA21432] Comet WebFileManager "Language" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY

By : LoneEagle E-mail : [email protected] http://kandangjamur.net Affected : IMENDIO PLANNER 0.13 PROJECT MANAGEMENT FEDORA 4. Impact : System Acces From : Remote Severity : Moderately Critical Description: ------------ Imendio planner was failed when opening file name format string. Remote...

[SA21374] Clam AntiVirus pefromupx() Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

PHP Simple Shop 2.0 - abs_path Remote File Inclusion

PHP Simple Shop 2.0 - abspath Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV44$2006 ------------------------------------------------------------------------------ ECHOADV44$2006 PHP Simple Shop = 2.0 abspath Remote File Inclusion...

PHP Simple Shop 2.0 - 'abs_path' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV44$2006 ------------------------------------------------------------------------------ ECHOADV44$2006 PHP Simple Shop = 2.0 abspath Remote File Inclusion...

[ECHO_ADV_42$2006] PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV42$2006 --------------------------------------------------------------------------------------------------- ECHOADV42$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

[Full-disclosure] Secunia Research: Jetbox Multiple Vulnerabilities

====================================================================== Secunia Research 02/08/2006 - Jetbox Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software....................................................1...

Knusperleicht Quickie - Quick_Path Remote File Inclusion

Knusperleicht Quickie - QuickPath Remote File Inclusion source: https://www.securityfocus.com/bid/19271/info Quickie is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

Knusperleicht Guestbook 3.5 - 'GB_PATH' Remote File Inclusion

source: https://www.securityfocus.com/bid/19274/info GuestBook is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the contex...

Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19245/info Moskool is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context ...