Confire config.py File Arbitrary Command Execution Vulnerability

Confire is a set of application configuration tools built on Scapy, Django and other configuration parsers. A security vulnerability in the YAML parsing function of the config.py file in Confire version 0.2.0 stems from the program using the 'yaml.load' function to load user-specific configuratio...

Vanilla 1.1.10 Remote File Inclusion

Vanilla-1.1.10 = Remote File Inclusion Vulnerability Title: Vanilla-1.1.10 = Remote File Inclusion Vulnerability Version: 1.1.10 link: http://php.opensourcecms.com/scripts/redirect/website.php?id=128 License: - Author: eidelweiss Date: 2010/03/22 Contact: eidelweissatcyberservices.com Thanks: Jos...

Security fix for the ALT Linux 6 package eggdrop version 1.6.18-alt2

Sept. 20, 2007 Vladimir V Kamarzin 1.6.18-alt2 - Security fix: CVE-2007-2807: Stack-based buffer overflow in mod/server.mod/servrmsg.c - Recode README.ALT to utf8 and update it - Create pseudouser on %pre stage - Install config to /var/lib/eggdrop - Load module blowfish by default - Change defaul...

OES (Open Educational System) 0.1beta - Remote File Inclusion

OES Open Educational System 0.1beta - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV69$2007 ----------------------------------------------------------------------------------------- ECHOADV69$2007 OES Open Educational System 0.1beta...

PT-2007-2274 · Atsphp · Atsphp

Name of the Vulnerable Software and Affected Versions: Atsphp version 5.0.1 Description: Multiple PHP remote file inclusion issues allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to API endpoints such as "index.php", "sources/usercp.php", or...