Remote file inclusion

PHP remote file inclusion vulnerability in langset.php in J! Reactions comjreactions 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP code via a URL in the comPath parameter...

CVE-2007-4244

PHP remote file inclusion vulnerability in langset.php in J! Reactions comjreactions 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP code via a URL in the comPath parameter...

CVE-2007-4244

CVE-2007-4244 describes a PHP remote file inclusion in the Joomla! component J! Reactions (com_jreactions) 1.8.1 and earlier . The vulnerability is in the file langset.php where an attacker can supply a URL in the comPath parameter to cause arbitrary PHP code execution on affected servers. Docume...

CVE-2007-4244: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in langset.php in J! Reactions comjreactions 1.8.1 and earlier, a Joomla! component, allows remote attackers to execute arbitrary PHP code via a URL in the comPath parameter...

J! Reactions 1.8.1 - comPath Remote File Inclusion

J! Reactions 1.8.1 - comPath Remote File Inclusion source: https://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the...

J! Reactions 1.8.1 - comPath Remote File Inclusion

source: https://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

CVE-2006-7119: Undefined Security Weakness

PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFGPHPGIGGLEROOT parameter...

CVE-2007-1144

Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

CVE-2007-1143

CVE-2007-1143 describes a directory traversal vulnerability in pn-menu.php of J-Web Pics Navigator 1.0. The flaw allows remote attackers to list arbitrary directories by supplying a .. sequence in the dir parameter. Documents consistently identify this as a directory traversal risk with impact on...

CVE-2007-1143

Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

CVE-2007-1144

CVE-2007-1144 describes a directory traversal vulnerability in J-Web Pics Navigator 2.0, specifically in jwpn-photos.php where a dot-dot (“..”) in the dir parameter allows remote listing of arbitrary directories. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network access, low at...

CVE-2007-1143: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

CVE-2007-1144: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

CVE-2007-0018

Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control NCTAudioFile2.dll, as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include 1 NCTsoft NCTAudioStudio, NCTAudioEdito...

CVE-2006-6892

Cross-site scripting XSS vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable...

CVE-2006-6892

The CVE-2006-6892 entry concerns OvBB 0.13a (Jonathon J. Freeman) with an XSS flaw in GetLocation() in online.php. The issue allows remote attackers to inject arbitrary script/HTML via the aRequest parameter, enabling client-side impact on affected pages. The vulnerability is caused by improper h...

CVE-2006-6892: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable...

CVE-2006-6892

Cross-site scripting XSS vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable...

CVE-2006-6454

execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the 1 exe and 2 args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-6454

CVE-2006-6454 affects J-OWAMP Web Interface 2.1b and earlier. The vulnerability arises in execInBackground.php where remote attackers can cause arbitrary command execution by injecting shell metacharacters into the exe and args parameters used in an exec() call. This is a remote, unauthenticated ...