CVE-2006-1149

The CVE-2006-1149 entry applies to Owl Intranet Engine 0.82. PHP remote file inclusion arises when register_globals is on and xrms_file_root is used unsafely in lib/OWL_API.php. An unauthenticated attacker can cause arbitrary file inclusion (and potentially PHP code execution) by supplying a URL ...

CVE-2006-1149

PHP remote file inclusion vulnerability in lib/OWLAPI.php in OWL Intranet Engine 0.82, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the xrmsfileroot parameter, which is not initialized before use...

[SA19142] Owl Intranet Engine "xrms_file_root" File Inclusion Vulnerability

TITLE: Owl Intranet Engine "xrmsfileroot" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19142 VERIFY ADVISORY: http://secunia.com/advisories/19142/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Owl Intranet Engine 0.x http://secunia.com/product/1579/...

Owl Intranet Engine xrms_file_root Parameter Remote File Inclusion

Binary data 3465.prm...

OWL Intranet Engine 0.82 (xrms_file_root) Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================ OWL Intranet Engine 0.82 xrmsfileroot Code Execution Exploit ================================================================ !/usr/bin/perl use IO::Socket; print...

OWL Intranet Engine 0.82 (xrms_file_root) Code Execution Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print "WwwWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print "WWwoLWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print...

OWL Intranet Engine 0.82 - 'xrms_file_root' Code Execution

!/usr/bin/perl use IO::Socket; print "WwwWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print "WWwoLWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print...

OWL Intranet Engine 0.82 - xrms_file_root Code Execution

OWL Intranet Engine 0.82 - xrmsfileroot Code Execution !/usr/bin/perl use IO::Socket; print "WwwWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print "WWwoLWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print...

Various Vulnerabilities in OWL Intranet Engine

---------------------------------------------------------------------------- Various Vulnerabilities in OWL Intranet Engine ---------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2004 Location: Basque Country...

CVE-2003-0341

The CVE-2003-0341 entry describes an XSS vulnerability in Owl Intranet Engine, affecting version 0.71 and earlier. The issue allows remote attackers to inject arbitrary script through the Search field, with impact aligning to partial confidentiality, integrity, and availability (per CVSS 2.0 vect...

CVE-2003-0341

Cross-site scripting XSS vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field...

[AP] Owl Intranet Engine CSS Bug

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 05/21/2003 homepage: http://sec.angrypacket.com advisory id: 0x0005...

CVE-2003-0341

Cross-site scripting XSS vulnerability in Owl Intranet Engine 0.71 and earlier allows remote attackers to insert arbitrary script via the Search field...

Owl browse.php Authentication Bypass

The remote host is using owl intranet engine, an open source file sharing utility written in php. There is a flaw in this application that may allow an attacker to browse files on this host without having to log in. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 13 May 2003...