2246 matches found
CVE-2006-2404
Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...
CVE-2006-2404
CVE-2006-2404 is a directory-traversal vulnerability in the RadScripts RadLance Gold 7.0 package, specifically in popup.php. The underlying issue allows an unauthenticated attacker to read arbitrary files by providing a ".." sequence in the read parameter, enabling unauthorized access to local fi...
CVE-2006-2404
Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. dot dot in the read parameter...
RadScripts RadLance 7.0 - popup.php Local File Inclusion
RadScripts RadLance 7.0 - popup.php Local File Inclusion source: https://www.securityfocus.com/bid/17975/info RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. RadLance Gold 7.0 is reported affected by this issue...
Remote file inclusion
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter...
[MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability
MajorSecurityActualAnalyzer - Remote File Include Vulnerability ----------------------------------------------------------- Software: ActualAnalyzer Type: Remote File Include Vulnerability Date: April, 19th 2006 Vendor: ActualScripts Page: http://actualscripts.com Risc: High Credits:...
Format string
Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...
CVE-2006-1145
The CVE-2006-1145 entry concerns a format string vulnerability in the safe_cprintf function of acebot_cmds.c from Alien Arena 2006 Gold Edition 5.00. The flaw could allow remote attackers (potentially authenticated) to execute arbitrary code when the server sends crafted messages to clients; exac...
CVE-2006-1145
Format string vulnerability in the safecprintf function in acebotcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients...
CVE-2006-1146
Stack-based buffer overflow in the CmdSayf function in gcmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers possibly authenticated to execute arbitrary code by sending a long message to the server...
[Full-disclosure] Multiple vulnerabilities in Alien Arena 2006 GE 5.00
Luigi Auriemma Application: Alien Arena 2006 Gold Edition http://red.planetarena.org Versions: = 5.00 Platforms: Windows and Linux Bugs: A safecprintf server format string B CmdSayf server buffer-overflow C Comsprintf crash Exploitation: A remote, versus server in-game B remote, versus server...
Alien Arena 2006 Gold Edition 5.00 - Multiple Vulnerabilities
/ by Luigi Auriemma / include include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: err...
Alien Arena 2006 Gold Edition <= 5.00 Multiple Vulnerabilities Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Alien Arena 2006 Gold Edition include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this...
Alien Arena 2006 Gold Edition <= 5.00 Multiple Vulnerabilities Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include stdarg.h include sys/stat.h include time.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the...
CVE-2005-4231
Cross-site scripting XSS vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 link parameter to tellfriend.php, 2 phrase parameter to search.php in a searchlinksadvanced action, and the 3 direction or 4 sort parameter to articles.php...
CVE-2005-4230
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter...
CVE-2005-4231
Cross-site scripting XSS vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 link parameter to tellfriend.php, 2 phrase parameter to search.php in a searchlinksadvanced action, and the 3 direction or 4 sort parameter to articles.php...
CVE-2005-4230
SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter...
CVE-2005-4230
CVE-2005-4230 concerns an SQL injection in poll.php of Link Up Gold 2.5 and earlier, exploitable via the number parameter to allow remote execution of arbitrary SQL commands. The core affected software is Link Up Gold (versions up to 2.5 and older). The cited sources (NVD entry) confirm the vulne...
CVE-2005-4231
The CVE-2005-4231 entry relates to a cross-site scripting (XSS) flaw in Link Up Gold 2.5 and earlier. The vulnerability arises from injectable input in multiple vectors: (1) the link parameter to tell_friend.php, (2) the phrase[] parameter to search.php in a search_links_advanced action, and (3)/...