1847 matches found
CVE-2007-0573
PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racineTBS parameter...
PhpSherpa (include/config.inc.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== PhpSherpa include/config.inc.php Remote File Include Vulnerability ====================================================================...
Fedora Core 5 : squirrelmail-1.4.7-2.fc5 (2006-788)
Many fixes here. Please report any regressions to Red Hat Bugzilla. - 1.4.7 with CVE-2006-3174 197369 - Move sqspellconfig.php to /etc and mark it %%confignoreplace 192236 - Reduce patch for body text 194457 - Better JP translation for 'Check mail' 196117 - Japanese zenkaku subject conversion...
CVE-2007-0100
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...
CVE-2007-0100
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...
CVE-2007-0100: Undefined Security Weakness
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server...
Debian DSA-1242-1 : elog - several vulnerabilities
Several remote vulnerabilities have been discovered in elog, a web-based electronic logbook, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-5063 Tilman Koschnick discovered that log entry editing i...
Pagetool CMS <= 1.07 (pt_upload.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Pagetool CMS = 1.07 ptupload.php Remote File Include Vulnerability ====================================================================== !usr/bin/perl use...
ME Download System <= 1.3 (header.php) Remote Inclusion Vulnerability
No description provided by source. +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........:...
Phpjobscheduler 3.0 (installed_config_file) File Include Vulnerabilities
No description provided by source. ====================================================================== Phpjobscheduler 3.0 - Multiple Remote File Include by Firewall Application Affect: phpjobscheduler 3.0 Source Code: http://scripts.ringsworld.com/development-tools/phpjobscheduler.v3.0.zip...
easy notes manager sql injection and authentication bypass
easy notes manager eNM version 0.0.1, available at http://217.172.179.216/evandor/html/index.php?id=103 is affected by multiple sql injection vulnerability due to a missing check of the user supplied input. An attacker can bypass the authentication procedure and get a full dump of the database...
PHP Top webs (config.php) Remote File Inclue Vulnerability
===================================================================== PHP Top webs config.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...
HotPlug CMS Config File Include Vulnerability
Hello HotPlug CMS Config File Include Vulnerability Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] After Script Url Add includes/class/config.inc And you will download the config file ,, so that you will be able to connect by remote connect...
cwfm091.txt
+-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...
tsep0942.txt
+-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class .............: Remote File Inclusion + Risk...
Cwfm 0.9.1 - 'Language' Remote File Inclusion
+-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...
ME Download System 1.3 - header.php Remote File Inclusion
ME Download System 1.3 - header.php Remote File Inclusion +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 ...
TSEP <= 0.942 (copyright.php) Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ TSEP + ..... + +-------------------------------------------------------------------- + + $tsepconfig"absPath" is not properly sanitized before being used +...
TSEP 0.942 - 'copyright.php' Remote File Inclusion
+-------------------------------------------------------------------- + + TSEP 0.9.4.2 + +-------------------------------------------------------------------- + + Affected Software .: TSEP 0.9.4.2 + Venedor ...........: http://www.tsep.info/ + Class .............: Remote File Inclusion + Risk...
The following is the updated version of a post sent to FD http://seclists.org/lists/fulldisclosure/2006/Jul/0137.html ... Title: Unauthenticated access to BT Voyager config file and PPP credentials embedded in HTML form Successfully tested against: - BT Voyager 2091 Wireless ADSL - Firmware...