CVE-2007-2364: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 mysql.class.php or 2 postgres.class.php in lib/db/; or 3 authuser.php, 4 misc.php, or 5 connect.php in lib/...

burnCMS 0.2 - 'root' Remote File Inclusion

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtodb parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...

CVE-2007-2101: Undefined Security Weakness

FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2065: Undefined Security Weakness

PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGDATAREADERWRITER parameter, a different vector than CVE-2001-1297. NOTE: the provenance of this information is unknown; the...

CVE-2007-2100: Undefined Security Weakness

FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb...

creabook-bypass.txt

/=======================================\ | Advisory :: Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | | +-------------------------------------------------------------------------------------------------------+ | Summary : 0 Description | | 1 Vuln1 : Administrative Access...

Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution

/======================================= | Advisory :: Crea-Book = 1.0 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.comscripts.com/scripts/php.creabook.1359.html | | Type : Guestbook | | Vuln. found :...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

CVE-2006-4250

The CVE-2006-4250 entry corresponds to a heap-based buffer overflow in the man and mandb utilities (man-db) affecting 2.4.3 and earlier, exploitable by local users via crafted arguments to the -H flag to potentially run arbitrary code with the user’s privileges (often root in vendor advisories). ...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

CVE-2006-4250

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

Debian DSA-1278-1 : man-db - buffer overflow

A buffer overflow has been discovered in the man command that could allow an attacker to execute code as the man user by providing specially crafted arguments to the -H flag. This is likely to be an issue only on machines with the man and mandb programs installed setuid. %NASLMINLEVEL 70300 C...

CVE-2006-4250: Undefined Security Weakness

Buffer overflow in man and mandb man-db 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag...

Crea-Book <= 1.0 Admin Access Bypass / DB Disclosure / Code Execution

Exploit for unknown platform in category web applications ===================================================================== Crea-Book fr/en | | Date : 2007-04-10 | | Last update : 2007-04-10 | | |...

[SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1278-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 06, 2007 -...

[SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1278-1 [email protected] http://www.debian.org/security/ Noah Meyerhans April 06, 2007 - ------------------------------------------------------------------------ Package : man-db Vulnerability...