Coppermine Photo Gallery 1.4.14 picEditor.php Command Execution

$Id: copperminepiceditor.rb 8562 2010-02-19 07:31:12Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Fedora 7 : zoneminder-1.22.3-8.fc7 (2008-3516)

Bug 444434 - CVE-2008-1381 zoneminder: command injection via unescaped php exec calls Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2004-2692: Undefined Security Weakness

The execdir PHP patch php-exec-dir 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the phpescapeshellcmd function...

GLSA-200507-03 : phpBB: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200507-03 phpBB: Arbitrary command execution Ron van Daal discovered that phpBB contains a vulnerability in the highlighting code. Impact : Successful exploitation would grant an attacker unrestricted access to the PHP exec or...

CVE-2004-1315: Undefined Security Weakness

viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which...