CVE-2008-2084

SQL injection vulnerability in topics.php in the MyArticles 0.6 beta-1 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a listarticles action...

CVE-2008-2014

Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service application crash via JavaScript code that calls document.write in an infinite loop...

PHP Forge 3 Beta 2 - id SQL Injection

PHP Forge 3 Beta 2 - id SQL Injection ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0...

PHP Forge 3 Beta 2 - 'id' SQL Injection

========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta Bug : Remote SQL Injection...

[SECURITY] Fedora 8 Update: Miro-1.2-2.fc8

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

[SECURITY] Fedora 7 Update: Miro-1.2-2.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/functionsweblog.php in mxBB mxblogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

CVE-2008-1712

PHP remote file inclusion vulnerability in includes/functionsweblog.php in mxBB mxblogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mxrootpath parameter...

mxbbmxblogs-rfi.txt

mxBB Module mxblogs 2.0.0-beta Remote File Include Exploit Vendor: http://www.mx-system.com Download: http://www.mx-system.com/index.php?page=4&action=file&fileid=405 Vulncode in: /includes/functionsweblog.php line 24 Greetz: str0ke, TheJT, rgod, Vallani, DNX, NBBN use Getopt::Long; use...

phpspamman-disclose.txt

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-0070

CVE-2008-0070 affects Orb Networks Orb 2.00.1014 and Winamp Remote BETA. Root cause: integer overflow causing a heap-based buffer overflow when an RPC request specifies a very large number of array dimensions. Impact: remote code execution potential. Exploitation details are not provided in the d...

[SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1531-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 27, 2008 http://www.debian.org/security/faq -...

[SECURITY] Fedora 7 Update: Miro-1.1.2-2.fc7

Miro is a free application that turns your computer into an internet TV video player. This release is still a beta version, which means that there are some bugs, but we're moving quickly to fix them and will be releasing bug fixes on a regular basis...

CVE-2008-1323

The CVE-2008-1323 entry documents a CSRF vulnerability in WoltLab Burning Board Lite (wBB) 2 Beta 1, where index.php’s ThreadDelete action can be abused by an attacker to delete threads as other users. This is triggered via forged requests, enabling unauthorized modification of data (thread delet...

Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure

Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

CVE-2008-1051

PHP remote file inclusion vulnerability in include/bodycomm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

CVE-2008-1043

Affected software: Linux Web Shop (LWS) PHP User Base 1.3 BETA. Vulnerability type: PHP remote file inclusion in templates/default/header.inc.php. Root cause / vector: remote attackers can supply a URL in the menu parameter, leading to arbitrary PHP code execution. Impact (as stated): arbitrary c...

PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...