615 matches found
FreeBSD : dokuwiki -- multiple vulnerabilities (450b76ee-5068-11db-a5ae-00508d6a62df)
Secunia reports : Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the 'w' and 'h' parameters in lib/exec/fetch.php is not properly sanitised before being...
CVE-2006-4102: Undefined Security Weakness
PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the confclasspath parameter...
SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= SQLiteWebAdmin 0.1 tpl.inc.php Remote Include Vulnerability ============================================================= SQLiteWebAdmin...
PT-2006-4708 · Vanilla · Vanilla Cms
Name of the Vulnerable Software and Affected Versions: Vanilla CMS versions 1.0.1 and earlier Description: The issue concerns a remote file inclusion vulnerability in the upgrader.php file of Vanilla CMS. This vulnerability can be exploited when the /conf/old settings.php file exists, allowing...
Remote file inclusion
PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFlocalpath parameter...
CVE-2006-2818: Undefined Security Weakness
PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONFlocalpath parameter...
security flaw
The sysctl functionality sysctl.c in Linux kernel before 2.6.14.1 allows local users to cause a denial of service kernel oops and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function...
CVE-2005-3728: Undefined Security Weakness
Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information...
CVE-2005-2709: Undefined Security Weakness
The sysctl functionality sysctl.c in Linux kernel before 2.6.14.1 allows local users to cause a denial of service kernel oops and possibly execute code by opening an interface file in /proc/sys/net/ipv4/conf/, waiting until the interface is unregistered, then obtaining and modifying function...
CVE-2004-2353: Undefined Security Weakness
BugPort before 1.099 stores its configuration file conf/config.conf under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information...
security flaw
KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
PT-2004-3049 · Apple +1 · Cups +1
Name of the Vulnerable Software and Affected Versions: CUPS versions prior to 1.1.21rc1 Description: The issue allows attackers to bypass intended Access Control Lists ACLs due to the case-sensitive treatment of a Location directive in cupsd.conf. This can be exploited via a printer name containi...
CVE-2004-1107: Undefined Security Weakness
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
