Kravchuk letter script 1.0 (scdir) Remote File Inclusion Vulnerabilities

No description provided by source. ++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

CVE-2007-3118

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

CVE-2007-3118

CVE-2007-3118 affects Kravchuk letter (K-letter) 1.0. The vulnerability is a PHP remote file inclusion flaw in the scdir parameter used by action.php, subs.php, or unsubs.php, allowing an attacker to execute arbitrary PHP code. Root cause: unsafely constructed URL parameter enabling remote file i...

CVE-2007-3118

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

kletter-rfi.txt

++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813 +...

Kravchuk letter script 1.0 - scdir Remote File Inclusion

Kravchuk letter script 1.0 - scdir Remote File Inclusion ++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++ + K-letter 1.0 Remote File include + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + DownloadScript: http://www.scripts.com.ua/download.php?ID=813...

Kravchuk letter script 1.0 (scdir) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== Kravchuk letter script 1.0 scdir Remote File Inclusion Vulnerabilities ========================================================================...

CVE-2007-1580

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

Buffer overflow

FTPDMIN 0.96 allows remote attackers to cause a denial of service daemon crash via a LIST command for a Windows drive letter, as demonstrated using "//A:". NOTE: this has been reported as a buffer overflow by some sources, but there is not a long argument...

CVE-2007-1580

FTPDMIN 0.96 is affected. A remote attacker can trigger a denial of service (daemon crash) by issuing a LIST command targeting a Windows drive letter (e.g., //A:). The issue is documented as a potential buffer overflow in some sources, but the available records state only a DoS via LIST for a dri...

In the benefits letter news system application file upload vulnerability-vulnerability warning-the black bar safety net

Recently everyone for dvbbs file upload vulnerability excited, thinking about other inside the system can not be used on? I will for the benefit of the letter of information systems to the topic! System environment: benefits letter press system 3. 1, Windows2000+sp4. Look at this line of code: |...

Directory traversal

Absolute path directory traversal vulnerability in a MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and b VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the 1 language parameter in...

CVE-2006-3488

The CVE-2006-3488 entry concerns an absolute path traversal in VirtuaStore 2.0, specifically the administrador.asp component. According to the provided documents, the vulnerability allows remote attackers to read arbitrary directories or files by supplying an absolute path with a Windows drive le...

CVE-2006-1953

Directory traversal vulnerability in Caucho Resin 3.0.17 and 3.0.18 for Windows allows remote attackers to read arbitrary files via a "C:%5C" encoded drive letter in a URL...

security flaw

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow...

Ubuntu 4.10 / 5.04 / 5.10 : mozilla-firefox, firefox vulnerabilities (USN-271-1)

Web pages with extremely long titles caused subsequent launches of Firefox browser to hang for up to a few minutes, or caused Firefox to crash on computers with insufficient memory. CVE-2005-4134 Igor Bukanov discovered that the JavaScript engine did not properly declare some temporary variables...

security flaw

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to execute arbitrary code via a large number in the CSS letter-spacing property that leads to a heap-based buffer overflow...

Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the Mozilla/Firefox web browser and Thunderbird e-mail client. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious e-mail. The...

[Full-disclosure] ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability

ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-010.html April 13, 2006 -- CVE ID: CVE-2006-1730 -- Affected Vendor: Mozilla -- Affected Products: Mozilla 1.7.x and below Firefox 1.5.x and below -- TippingPointTM IPS...