Lucene search
+L

6 matches found

NVD
NVD
•added 2010/08/30 8:00 p.m.•25 views

CVE-2010-2945

The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...

6.9CVSS6.3AI score0.00297EPSS
SaveExploits0References4
OSV
OSV
•added 2010/08/30 8:00 p.m.•11 views

CVE-2010-2945

The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...

6.6AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2010/08/30 8:00 p.m.•25 views

CVE-2010-2945

The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...

6.9CVSS5.9AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2010/08/30 7:00 p.m.•72 views

CVE-2010-2945

CVE-2010-2945 affects the Slim program; the issue arises when the default_path in slim.conf places ./ at the start, enabling local privilege escalation via a Trojan horse in the current working directory. Connected advisories (Fedora GLSA updates and OpenVAS feeds) confirm Slim as affected and re...

6.9CVSS8.8AI score0.00297EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/08/30 12:00 a.m.•3 views

CVE-2010-2945: Undefined Security Weakness

The default configuration of SLiM before 1.3.2 places ./ dot slash at the beginning of the defaultpath option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp...

6.9CVSS6AI score0.00297EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/06/02 12:00 a.m.•5 views

CVE-2006-2767: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in Ottoman 1.1.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the defaultpath parameter in 1 error.php, 2 index.php, and 3 classes/mainclass.php...

5.1CVSS6.4AI score0.03381EPSS
SaveExploits2References2
Rows per page
Query Builder