CVE-2006-4085: Undefined Security Weakness

PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to pagenavigation.php, a different vector than CVE-2006-4055. NOTE: the provenance of this...

CVE-2006-4055

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to 1 include/colorswitch.php, 2 contentimages.class.php, 3 ipfunctions.php, 4...

CVE-2006-4055

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to 1 include/colorswitch.php, 2 contentimages.class.php, 3 ipfunctions.php, 4...

CVE-2006-4055: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project TSEP 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter to 1 include/colorswitch.php, 2 contentimages.class.php, 3 ipfunctions.php, 4...

CVE-2006-4055

CVE-2006-4055 concerns multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier. The issue is triggered via the tsep_config[absPath] parameter and affects (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (...

CVE-2006-3993

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project TSEP 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter...

CVE-2006-3993: Undefined Security Weakness

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project TSEP 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter...

CVE-2006-3993

The CVE-2006-3993 entry describes a PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942, specifically in copyright.php. The underlying issue is that the tsep_config[absPath] parameter can be controlled by an attacker to supply a URL, enabling remote cod...

XFree86: xdm flaw; present in kdm

Hi, Just a minor one this. Discovered during a 5 minute pass of "xdm". I subsequently discovered "kdm" has copied the xdm core xdmcp code. I'm posting this because I think Caldera released an advisory, but a general discussion of the problem did not yet appear on Bugtraq. Further audit of kdm/xdm...