CVE-2006-5426: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter...

Debian DSA-1105-1 : xine-lib - buffer overflow

Federico L. Bossi Bonin discovered a buffer overflow in the HTTP Plugin in xine-lib, the xine video/media player library, that could allow a remote attacker to cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Debian DSA-1005-1 : xine-lib - buffer overflow

Simon Kilvington discovered that specially crafted PNG images can trigger a heap overflow in libavcodec, the multimedia library of ffmpeg, which may lead to the execution of arbitrary code. xine-lib includes a local copy of libavcodec. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2006-5262

The CVE-2006-5262 entry describes a CRLF injection in Hastymail 1.5 and earlier (before 20061008) affecting lib/session.php. Remote authenticated users can craft a mailbox name containing CRLF to send arbitrary IMAP commands; the attack may cross privilege boundaries if the IMAP server is configu...

CVE-2006-5262: Undefined Security Weakness

CRLF injection vulnerability in lib/session.php in Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary IMAP commands via a CRLF sequence in a mailbox name. NOTE: the attack crosses privilege boundaries if the IMAP server configuration prevents a user from...

CVE-2006-5250: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6public and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APPpathlib parameter, a different vector than CVE-2006-2864...

CVE-2006-5189: Undefined Security Weakness

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

PT-2006-5826 · Phpmychat · Phpmychat

Name of the Vulnerable Software and Affected Versions: phpMyChat version 0.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter in the connected users.lib.php3 file. Recommendations: For phpMyChat version 0.1, consider restricting acce...

CVE-2006-5098: Undefined Security Weakness

lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...

CVE-2006-5099: Undefined Security Weakness

lib/exec/fetch.php in DokuWiki before 2006-03-09e, when confimconvert is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 w and 2 h parameters, which are not filtered when invoking convert...

dokuwiki -- multiple vulnerabilities

Secunia reports: Some vulnerabilities have been reported in DokuWiki, which can be exploited by malicious people to cause a DoS Denial of Service or potentially compromise a vulnerable system. Input passed to the "w" and "h" parameters in lib/exec/fetch.php is not properly sanitised before being...

CVE-2006-4937: Undefined Security Weakness

lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display EWARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages...

GLSA-200609-08 : xine-lib: Buffer overflows

The remote host is affected by the vulnerability described in GLSA-200609-08 xine-lib: Buffer overflows xine-lib contains buffer overflows in the processing of AVI. Additionally, xine-lib is vulnerable to a buffer overflow in the HTTP plugin xinepluginphttp.so via a long reply from an HTTP server...

CVE-2006-4824: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums QSF 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setincludepath parameter...

CVE-2006-4799

Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802...

CVE-2006-4799

Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802...

CVE-2006-4799

Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802...

CVE-2006-4799

CVE-2006-4799 is a buffer overflow in ffmpeg for xine-lib prior to 1.1.2 that could allow context-dependent attackers to execute arbitrary code via a crafted AVI file and bad indexes. Documents provided include NVD data (base score 7.5, network vector, no authentication, partial confidentiality/i...

CVE-2006-4799: Undefined Security Weakness

Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802...

CVE-2006-4785: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insertrecord function, which calls adodbcolumnsql in the adodb lay...