167 matches found
Fedora 10 : lcms-1.18-0.1.beta2.fc10 (2009-2970)
Some patches that was collected in the fedora package have just been submitted upstream. Changes are hight that this update can be superseeded by a beta3 or a stable release from upstream. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Remote file inclusion
PHP remote file inclusion vulnerability in conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-2008-6316...
CVE-2008-6315
PHP remote file inclusion vulnerability in conf/core/common-tpl-vars.php in PHPmyGallery 1.0 beta2 allows remote attackers to execute arbitrary PHP code via a URL in the confdir parameter, a different issue than CVE-2008-6316...
CVE-2008-6315
CVE-2008-6315 describes a PHP remote file inclusion vulnerability in _conf/core/common-tpl-vars.php of PHPmyGallery 1.0 beta2, where an attacker can supply a URL in the confdir parameter to execute arbitrary PHP code remotely. Related entries cover a separate but similar issue (CVE-2008-6316 ) in...
Microsoft Internet Explorer NULL Pointer DoS Vulnerability
This host has Internet Explorer installed and is prone to Remote Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmsienullptrdosvuln.nasl 6527 2017-07-05 05:56:34Z cfischer $ Microsoft Internet Explorer NULL Pointer DoS Vulnerability Authors: Sharath S Copyright: Copyright c 200...
CVE-2009-0072: Undefined Security Weakness
Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service application crash via an onload=screen"" attribute value in a BODY element...
PT-2008-6770 · Netatalk +1 · Netatalk +1
Name of the Vulnerable Software and Affected Versions: Netatalk versions prior to 2.0.4-beta2 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a print request. This can be achieved by using certain variables in a pipe command for the print...
PHPCMS2008 BETA2 tasteless 0day a-vulnerability warning-the black bar safety net
data\cachemodel\membersearch.class.php username directly get into SQL. Tasteless is because of this hole to the administrator to set the 'registered members' to have a 'search' function. if$this-modelid if$where $where = "AND $where"; if$this-modelid == 1 0 && $GET'username' $username =...
Remote file inclusion
PHP remote file inclusion vulnerability in cms/classes/openengine/filepool.php in openEngine 2.0 beta2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the oeclasspath parameter, a different vector than CVE-2008-4329...
CVE-2008-4719
OpenEngine 2.0 beta2 contains a PHP remote file inclusion flaw in cms/classes/openengine/filepool.php when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the oe_classpath parameter, a different vector than CVE-2008-4329. The vulnerability is ...
openEngine 2.0 beta2 Remote File Inclusion Vulnerability
No description provided by source. Author : By CrackersChild Contact: [email protected] Greetz : str0ke & All My Friends Script : openEngine 2. 0 beta2 Remote File include Vulnerable Download :http://downloads.sourceforge.net/openengine/openengine20beta2.zip?modtime=1203083918&bigmirror=0...
openEngine 2.0 beta2 - Remote File Inclusion
Author : By CrackersChild Contact: [email protected] Greetz : str0ke & All My Friends Script : openEngine 2. 0 beta2 Remote File include Vulnerable Download :http://downloads.sourceforge.net/openengine/openengine20beta2.zip?modtime=1203083918&bigmirror=0 Exploit :...
yapbb-rfi.txt
┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...
Fedora 8 : speex-1.2-0.4.beta2 (2008-3103)
Security update: Add mode checks to speexpackettoheader to protect applications using speex library and not having proper checks CVE-2008-1686, 441239, https://trac.xiph.org/changeset/14701 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...
Joomla! 1.5 Beta1/Beta2/RC1 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php / Explanation: Although the comment points out that the "filter" variable is supposedly cleansed there is no input validation being performed except for the fact that all input is being turned into lowercase. Affected...
Microsoft Internet Explorer Document.Domain跨域同源覆盖漏洞
Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer存在绕过同源策略问题，远程攻击者可以利用漏洞访问其他目标域或者进行内容伪造攻击。 攻击者可以通过修改document.domain中的值，构建恶意WEB页，诱使用户访问来触发。 Microsoft Internet Explorer 6.0 SP2 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 - Citrix ICA Client for Windows 4.0...
ClientExec 3.0 - index.php Multiple Cross-Site Scripting Vulnerabilities
ClientExec 3.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24061/info ClientExec is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion
!/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php" include"modules/".$op.".php"; use IO::Socket; use LWP::Simple; ripp...
FileZilla多个格式串漏洞
FileZilla是一款免费的FTP客户端软件。 FileZilla处理用户名数据存在问题，远程攻击者可以利用漏洞进行格式串攻击，可能以进程权限执行任意指令。 如果用户名包含%字符，连接将会提示错误，而造成格式串攻击，可能以进程权限执行任意指令。 FileZilla 3.0 -beta4 FileZilla 3.0 -beta3 FileZilla 3.0 -beta2 FileZilla 3.0 -beta1 升级程序： FileZilla FileZilla 3.0 -beta1 FileZilla FileZilla3.0.0-beta5src.tar.bz2...