SL_Site <= 1.0 [spaw_root] Remote File Include Vulnerability

--------------------------------------------------------------------------- SLSite = 1.0 spawroot Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critical...

PHP Proxima <= v.6 completepack Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================= PHP Proxima = v.6 completepack Remote Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? $devilteam = "...

tiny15.txt

C Y B E R - W A R R i O R TIM TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------ Script: TinyWebGallery...

phpPrintAnalyzer 1.1 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19397/info phpPrintAnalyzer is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...

EUVD-2006-3174

PHP remote file inclusion vulnerability in Admin/rtfparser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter...

Simpnews 2.x - Wap_short_news.php Remote File Inclusion

Simpnews 2.x - Wapshortnews.php Remote File Inclusion source: https://www.securityfocus.com/bid/18410/info Simpnews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...

CVE-2006-2447

SpamAssassin before 3.1.3, when running with vpopmail and the paranoid -P switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username...

Wikiwig <= 4.1 (wk_lang.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== Wikiwig = 4.1 wklang.php Remote File Include Vulnerability ============================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM...

CVE-2006-2702

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PCREMOTEADDR HTTP header, which vars.php uses to redefine $SERVER'REMOTEADDR'...

CVE-2006-2568

UBB.threads vulnerability CVE-2006-2568 is a remote file inclusion in addpost_newpoll.php, where the thispath parameter is consumed by PHP include() without proper sanitization. Affected versions are UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial). Exploitation can enable an attacker to view ar...

CVE-2006-2396

Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...

EUVD-2006-2254

PHP remote file inclusion vulnerability in visiblecountinc.php in Statit 4 060207 allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter...

CVE-2006-2115

Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call...

TopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= TopList = 1.3.8 phpBB Hack Remote File Inclusion Vulnerability ================================================================= Title: TopList Hack for PHPBB = 1.3.8 Remote...

Format string

Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the version string...

CVE-2006-1940

Unspecified vulnerability in Ethereal 0.10.4 up to 0.10.14 allows remote attackers to cause a denial of service abort via the SNDCP dissector...

SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability

Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-002 Advisory Name: McAfee WebShield SMTP Format String Vulnerability Release Date : 04-03-2005 Application : McAfee WebShield SMTP 4.5 MR1a Platform : Microsoft Windows Severity : System...

[SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness

-------------------------------------------------------------------------- Debian Security Advisory DSA 996-1 [email protected] http://www.debian.org/security/ Martin Schulze March 13th, 2006 http://www.debian.org/security/faq -...

KLA10324 ACE vulnerability in Shareaza

Integer overflows were found in Shareaza. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories - Related products Shareaza CVE list CVE-2006-0474 high Solution Update to lates...

CVE-2006-0405

The TIFFFetchShortPair function in tifdirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function...