CVE-2006-6454

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the 1 exe and 2 args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-6454

CVE-2006-6454 affects J-OWAMP Web Interface 2.1b and earlier. The vulnerability arises in execInBackground.php where remote attackers can cause arbitrary command execution by injecting shell metacharacters into the exe and args parameters used in an exec() call. This is a remote, unauthenticated ...

CVE-2006-6453

PHP remote file inclusion vulnerability in JOWAMPShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the link parameter...

CVE-2006-6454

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the 1 exe and 2 args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-6453

The CVE affects J-OWAMP Web Interface 2.1, via JOWAMP_ShowPage.php, enabling remote authenticated users to execute arbitrary PHP code through a URL in the link parameter. Base CVSS v2 score 6.5 (MEDIUM). Exploitation details exist in external references (e.g., Exploit-DB). No remediation details ...

J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ J-OWAMP Web Interface $cmd=$; chomp$cmd; $xpl = LWP::UserAgent-new or die; $req =...

CVE-2006-5809

Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors...

CVE-2006-5809

Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors...

CVE-2006-5809

Technical details are not publicly available in the provided documents. Current entries describe generic, unrevealed vulnerabilities in OvBB before 0.13a without specifics on impact, vectors, or remediation. Monitor for updates.

Solaris 2.6 (sparc) : 106830-01

The remote host is missing Sun Security Patch number 106830-01 Netra-j 2.1: make ssl module work as client, domestic US only. Date this patch was last updated by Sun : Tue Jan 12 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

Solaris 2.5.1 (sparc) : 106830-01

The remote host is missing Sun Security Patch number 106830-01 Netra-j 2.1: make ssl module work as client, domestic US only. Date this patch was last updated by Sun : Tue Jan 12 17:00:00 MST 1999 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

CVE-2006-5678

CVE-2006-5678 describes a PHP remote file inclusion in common/visiteurs/include/library.inc.php used by J-Pierre DEZELUS Les Visiteurs 2.0.1 (and phpMyConferences 8.0.2). The vulnerability would allow arbitrary PHP code execution via a URL in the lvc_modules_dir parameter. NOTE: CVE states that t...

CVE-2006-5678

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...

CVE-2006-5310

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

CVE-2006-5310

CVE-2006-5310 is a PHP remote file inclusion vulnerability in the phpMyConferences/Less Visiteurs stack. The flaw exists in common/visiteurs/include/menus.inc.php used by J-Pierre Dezel... Les Visiteurs 2.0.1 and, in turn, by phpMyConferences 8.0.2 (and possibly other products). An attacker can s...

jriver.txt

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

KLA10230 DoS vulnerability in J River Media Center

A buffer overflow was found in J River Media Center. By exploiting this vulnerability malicious users can cause denial of service and possible execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Original advisories Forum topic securityfocus Related...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

J. River Media Center 11.0.309 - Remote Denial of Service PoC !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a...

J. River Media Center 11.0.309 - Remote Denial of Service (PoC)

!/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Center 11 d0s exploit overly long string. TiVo server plugin..Runs on port tcp :8070 Also J. River UPnP Server Version 1.0.34 is also afected by the same bug which is just a dos exploit.As we know the port always changes for the UPnP...

J. River Media Center 11.0.309 Remote Denial of Service PoC

Exploit for unknown platform in category dos / poc =========================================================== J. River Media Center 11.0.309 Remote Denial of Service PoC =========================================================== !/usr/bin/perl Credit to n00b for finding this bug..^ ^ Media Cent...