Remote file inclusion

PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter...

CVE-2007-1006

Multiple format string vulnerabilities in the gmmainwindowflashmessage function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet...

CVE-2007-1006

CVE-2007-1006 affects Ekiga prior to 2.0.5, where multiple format string vulnerabilities in gm_main_window_flash_message can be triggered by a crafted Q.931 SETUP packet. This could cause denial of service and potentially allow arbitrary code execution. The advisory details indicate the issue res...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remote attackers to execute arbitrary PHP code via an ftp URL in the n parameter...

CVE-2007-0976

Buffer overflow in the ActSoft DVD-Tools ActiveX control dvdtools.ocx allows remote attackers to execute arbitrary code via a long DVDTOOLS.OpenDVD property value...

HP Mercury LoadRunner mchan.dll buffer overflow

Added: 02/16/2007 CVE: CVE-2007-0446 BID: 22487 OSVDB: 33132 Background HP Mercury LoadRunner is a load testing solution. Problem A buffer overflow in the mchan.dll library allows remote attackers to execute arbitrary commands by sending a packet with a long serveripname field to port 54345/TCP...

Heap overflow

Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce header...

CVE-2007-0770

Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a PALM image that is not properly handled by the ReadPALMImage function in coders/palm.c. NOTE: this issue is due to an incomplete patch for...

Remote file inclusion

PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathsversion parameter...

CVE-2006-6978

Cross-site scripting XSS vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the 1 href or 2 onmouseover attribute of the A HTML tag...

CVE-2007-0828

PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute arbitrary PHP code via a URL in the newsenginedir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter...

CVE-2007-0796

Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption...

CVE-2007-0759

CVE-2007-0759 affects EasyMoblog 0.5.1 with multiple SQL injection flaws. The vulnerabilities occur in add_comment.php (parameters i and post_id) and list_comments.php (parameter i), triggering injections in libraries.inc.php. This allows remote attackers to execute arbitrary SQL commands. The re...

Sql injection

Multiple SQL injection vulnerabilities in the generatecsv function in classes/class.news.php in X-dev xNews 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 from, and 3 q parameters, different vectors than CVE-2007-0569. NOTE: The provenance of this...

CVE-2007-0630

CVE-2007-0630 describes multiple SQL injection vulnerabilities in the generate_csv function of X-dev xNews 1.3 and earlier. The affected component is generate_csv in classes/class.news.php, with vulnerable parameters (id, from, q). The issue enables remote attackers to execute arbitrary SQL comma...

Remote file inclusion

PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sqllanguage parameter...

CVE-2006-6958

Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter to 1 teamadmin.php, 2 rssadmin.php, 3 manualadmin.php, and 4 forumadmin.php in includes/rootmodules/, a different set of vecto...

CVE-2007-0463

Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service application crash or execute arbitrary code via format string specifiers in 1 SWUTMP or 2 SUCATALOG filenames, or using the 3 application/x-apple.sucatalog+xml MIME...