CVE-2007-0496: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/nl/nl.php in Neon Labs Website nlws 3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gstrRootDir parameter...

Neon Labs Website 3.2 - nl.php?g_strRootDir Remote File Inclusion

Neon Labs Website 3.2 - nl.php?gstrRootDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

CVE-2006-6920: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving 1 lib/ADMIN.php and 2 lib/SKIN.php...

Debian DSA-1244-1 : xine-lib - buffer overflow

It was discovered that the Xine multimedia library performs insufficient sanitising of Real streams, which might lead to the execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

xine-lib buffer overflow

Buffer overflow on parsing Real streaming protocol...

[SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1244-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 28th, 2006 http://www.debian.org/security/faq -...

DSA-1244-1 xine-lib

Bulletin has no description...

CVE-2006-6725: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filename parameter to 1 lib/htm2php.php and 2 sitetools/htm2php.php. NOTE: The provenance of this information is unknown; the details are obtained...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 9.1, 10.0, 10.1, 10.2, and 11.0 to fix security issues. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2006-2200 Here are the details from the Slackware 11.0...

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure

PHPMysql Site Builder 0.0.2 - htm2PHP.php File Disclosure PHPBuilder v0.0.2 Remote File Disclosure Vulnerability Download: http://sourceforge.net/project/downloading.php?groupname=phpbuilder&filename=phpbuilder-0.0.2.tgz&usemirror=switch Found By: the master exploit:...

CVE-2006-6634

Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai comextcalendar 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGEXTLANGUAGESDIR parameter to adminevents.php, 2 the mosConfigabsolutepath parameter to...

CVE-2006-6631: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libdir parameter...

CVE-2006-6629: Undefined Security Weakness

lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation PG Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings 1 dangerousMacros.pl, 2 PG.pl, or 3...

CVE-2006-6551: Undefined Security Weakness

PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crtTUCOWSdomains/lib/domainutils.inc.php in Tucows Client Code Suite CCS 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ENVTCAHOME parameter...

CVE-2006-6516: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 page parameter to a index.php3, or the 2 libpath parameter to b authenticate.inc.php3 or c lib/exifer/exif.php...

GLSA-200612-02 : xine-lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200612-02 xine-lib: Buffer overflow A possible buffer overflow has been reported in the Real Media input plugin. Impact : An attacker could exploit this vulnerability by enticing a user into loading a specially crafted stream with...

CVE-2006-6415

CVE-2006-6415 describes a remote file inclusion risk in phpAdsNew 2.0.4-pr2, involving admin/lib-maintenance.inc.php and the phpAds_path parameter. Exploitation would allow remote PHP code execution via a URL. The issue is noted as disputed by CVE, since phpAds_path is used as a constant. Connect...

CVE-2006-6415: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAdspath is used as a...

Xine-Lib RuleMatches远程缓冲区溢出漏洞

xine是一款免费的媒体播放器，支持多种格式。 xine的Real Media输入插件的asmrpmatch函数中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 在以下代码段中，rulematches是仅能容纳16个int的静态缓冲区，但asmrpmatch没有对参数执行边界检查： 8--------------------------------------------8 src/input/libreal/real.c:468 for i=0; idesc-streamcount; i++ int j=0; int n; char b64; int...

CVE-2006-6369: Undefined Security Weakness

SQL injection vulnerability in lib/entryreplyentry.php in Invision Community Blog Mod 1.2.4 allows remote attackers to execute arbitrary SQL commands via the eid parameter, when accessed through the "Preview message" functionality...