CVE-2010-1149

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

CVE-2010-1149: Exposure of Sensitive Information to an Unauthorized Actor

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKSDMTARGETSPARAMS information to udev even for a crypt UDISKSDMTARGETSTYPE, which allows local users to discover encryption keys by 1 running a certain udevadm command or 2 reading a certain file under /dev/.udev/db/...

Oracle Enterprise Linux 5.5 kernel security and bug fix update

2.6.18-194.el5 - net mlx4: pass attributes down to vlan interfaces Doug Ledford 573098 - block cfq-iosched: fix sequential read perf regression Jeff Moyer 571818 2.6.18-193.el5 - fs gfs2: locking fix for potential dos Steven Whitehouse 572390 CVE-2010-0727 - acpi powermeter: avoid oops on driver...

Joomla! Component DM Orders - 'id' SQL Injection

source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component DM Orders - id SQL Injection

Joomla! Component DM Orders - id SQL Injection source: https://www.securityfocus.com/bid/37655/info The DM Orders component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

CVE-2009-3725: Undefined Security Weakness

The connector layer in the Linux kernel before 2.6.31.5 does not require the CAPSYSADMIN capability for certain interaction with the 1 uvesafb, 2 pohmelfs, 3 dst, or 4 dm subsystem, which allows local users to bypass intended access restrictions and gain privileges via calls to functions in these...

WordPress DM Albums插件任意文件删除漏洞

BUGTRAQ ID: 36799 DM Albums是在WordPress论坛中所使用的相册插件。 DM Albums插件中存在多个输入验证和访问验证错误，远程攻击者可以绕过安全限制或执行跨站脚本攻击。 1 由于没有正确地限制对dm-albums/wp-dm-albums-ajax.php脚本的访问，远程攻击者可以通过直接调用该脚本删除相册文件夹。 2 由于没有正确地过滤对dm-albums/wp-dm-albums-ajax.php所提交的deletealbum参数，远程攻击者可以利用目录遍历攻击删除相册根目录以外的文件夹。以下是有漏洞的代码段：...

DM FileManager 'album.php' Remote File Inclusion Vulnerability

The host is running DM FileManager and is prone to remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagerfileincvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'album.php' Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c 2009...

Remote file inclusion

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2399

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2396

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2399

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2396

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2396

CVE-2009-2396 affects DM Albums 1.9.2 (standalone or as a WordPress plugin). The vulnerability is a PHP remote file inclusion in template/album.php that allows an attacker to execute arbitrary code via a URL in the SECURITY_FILE parameter. Impact is consistent with a full compromise of affected s...

CVE-2009-2399

DM FileManager

CVE-2009-2396: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

CVE-2009-2399: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

DM FileManager Detection (HTTP)

HTTP based detection of DM FileManager and DM Albums. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DM FileManager 'login.php' Security Bypass Vulnerability

The host is running DM FileManager and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: gbdmfilemanagersecbypassvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DM FileManager 'login.php' Security Bypass Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...