18 matches found
EUVD-2004-2333
Malware in sbrugna...
EUVD-2012-5546
Malware in sbrugna...
CVE-2012-5663
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
CVE-2012-5663
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
Code injection
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
CVE-2012-5663
The CVE-2012-5663 entry affects the isearch package (textproc/isearch) prior to version 1.47.01nb1. The root cause is the use of tempnam() to create temporary files in /tmp, a publicly-writable directory, leading to potential integrity concerns. Per the referenced data, the vulnerability has inte...
CVE-2012-5663
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
CVE-2012-5663: Improper Privilege Management
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
ISearch 2.16 ISEARCH_PATH Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script cod...
PT-2006-5967 · Isearch · Isearch
Name of the Vulnerable Software and Affected Versions: iSearch version 2.16 Description: The issue concerns remote file inclusion vulnerabilities that could allow remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the isearch path parameter within various PHP...
CVE-2006-5232: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearchpath parameter in 1 index.php, 2 viewcache.php, 3 sitemap.php, 4 isearch.inc.php, 5 googlesitemap.php, 6 stats.php, or 7 autospiderimg.php. NOTE: this...
CVE-2006-5232
CVE-2006-5232 concerns multiple PHP remote file inclusion vulnerabilities in iSearch 2.16, allowing an attacker to execute arbitrary PHP code via a URL provided in the isearch_path parameter across several PHP files (index.php, viewcache.php, sitemap.php, isearch.inc.php, google_sitemap.php, stat...
ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion
source: https://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the...
ISearch 2.16 - ISEARCH_PATH Remote File Inclusion
ISearch 2.16 - ISEARCHPATH Remote File Inclusion source: https://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
CVE-2004-2341
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearchpath parameter...
CVE-2004-2341
CVE-2004-2341 describes a PHP file include injection in the iSearch component, specifically isearch.inc.php, allowing remote attackers to execute arbitrary code via the isearch_path parameter. The vulnerability indicates a remote code execution impact when an attacker can influence included files...
CVE-2004-2341: Undefined Security Weakness
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearchpath parameter...