CVE-2004-1554

The CVE-2004-1554 entry concerns @lex Guestbook (PHP) with a remote file inclusion vulnerability in livre_include.php where the chem_absolu parameter can be manipulated to reference a remote URL containing PHP code. This allows an attacker to remotely include and execute arbitrary PHP code on the...

CVE-2004-1554

PHP remote file inclusion vulnerability in livreinclude.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chemabsolu parameter to reference a URL on a remote web server that contains the code...

CVE-2004-1554

PHP remote file inclusion vulnerability in livreinclude.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chemabsolu parameter to reference a URL on a remote web server that contains the code...

@lex Guestbook livre_include.php chem_absolu Parameter Remote File Inclusion

The remote host seems to be running @lex guestbook, a guestbook web application written in PHP. The reported version may permit remote attackers, without prior authentication, to include and execute malicious PHP scripts. By modifying the 'chemabsolu' parameter of the 'livreinclude.php' script, i...

IBM AIX nslookup buffer overflow in lex routines

Overview There is a problem with the nslookup program related to the handling of long strings. Description This problem is reported to be the result of incorrect bounds checking on the part of the lex routines used in nslookup. This vulnerability is mentioned in an IBM advisory as being exploited...