CVE-2008-3575: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/calendar/minicalendar.php in ezContents CMS allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgsLanguage parameter, a different vector than CVE-2006-4477 and CVE-2004-0132...

Design/Logic Flaw

Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."...

CVE-2008-3453: Undefined Security Weakness

Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."...

CVE-2008-3416: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows remote attackers to execute arbitrary SQL commands via the username parameter in a members action to index.php, related to an incorrect protection mechanism in the cleanstring function in includes/functions.php...

CVE-2008-3295: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web script or HTML via the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3296: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules/system/admin.php in XOOPS 2.0.18 1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the fct parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

/etc/pam.d/su is wrong in RHEL-4.6

The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a 1 locked or 2 expired account by entering the account name on the command line, related to improper use of the pamsucceedif.so module...

CVE-2008-3166: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

boonexdolphin-rfi.txt

Name Of Script : Dolphin PHP Version : 6.1.2 Download From : http://heanet.dl.sourceforge.net/sourceforge/boonex-dolphin/Dolphin-v.6.1.2-Free.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon & Tryag.cc/cc Member From Tryag Forum Type Of Exploit : RFI In...

Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities =================================================================== Name Of Script : Dolphin PHP Versio...

Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions

Boonex Dolphin 6.1.2 - Multiple Remote File Inclusions Name Of Script : Dolphin PHP Version : 6.1.2 Download From : http://heanet.dl.sourceforge.net/sourceforge/boonex-dolphin/Dolphin-v.6.1.2-Free.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon &...

CVE-2008-2430: Undefined Security Weakness

Integer overflow in the Open function in modules/demux/wav.c in VLC Media Player 0.8.6h on Windows allows remote attackers to execute arbitrary code via a large fmt chunk in a WAV file...

Improper access control

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions...

tomcat directory traversal

Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules modproxy, modrewrite, modjk, allows remote attackers to read arbitrary files via a .. dot dot sequence with combinations of 1 "/" slash, 2 "" backslash, and...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...

CVE-2008-2854: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...

Important: Red Hat Security Advisory: sblim security update

Updated sblim packages that resolve a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. SBLIM stands for Standards-Based Linux Instrumentation for...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.101 allow remote attackers to inject arbitrary web script or HTML via the 1 propertyForm:propertyContentPage:propertySheet:propertSectionTextField:jndiProp:JndiNew, 2...

CVE-2008-2708

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...

CVE-2008-2708

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...