6 matches found
CVE-2010-2945
The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...
CVE-2010-2945
The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...
CVE-2010-2945
The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...
CVE-2010-2945
CVE-2010-2945 affects the Slim program; the issue arises when the default_path in slim.conf places ./ at the start, enabling local privilege escalation via a Trojan horse in the current working directory. Connected advisories (Fedora GLSA updates and OpenVAS feeds) confirm Slim as affected and re...
CVE-2010-2945: Undefined Security Weakness
The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...
CVE-2006-2767: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the defaultpath parameter in 1 error.php, 2 index.php, and 3 classes/mainclass.php...