CVE-2006-3993

PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project TSEP 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsepconfigabsPath parameter...

CVE-2006-3993

The CVE-2006-3993 entry describes a PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942, specifically in copyright.php. The underlying issue is that the tsep_config[absPath] parameter can be controlled by an attacker to supply a URL, enabling remote cod...

XFree86: xdm flaw; present in kdm

Hi, Just a minor one this. Discovered during a 5 minute pass of "xdm". I subsequently discovered "kdm" has copied the xdm core xdmcp code. I'm posting this because I think Caldera released an advisory, but a general discussion of the problem did not yet appear on Bugtraq. Further audit of kdm/xdm...