CVE-2007-5149

PHP remote file inclusion vulnerability in NewsCMS/news/newstopicinc.php in North Country Public Radio Public Media Manager PMM 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter...

CVE-2007-5149

The CVE-2007-5149 entry describes a PHP remote file inclusion vulnerability in NewsCMS/Public Media Manager (PMM) 1.3, specifically in NewsCMS/news/newstopic_inc.php where an attacker can cause arbitrary PHP code execution through a URL supplied in the indir parameter. The affected component is t...

CVE-2007-4923

CVE-2007-4923: Joomla Radio 5 (com_joomlaradiov5) on Joomla! is affected by a PHP Remote File Inclusion in admin.joomlaradiov5.php. The vulnerability allows an attacker to execute arbitrary PHP code by manipulating the mosConfig_live_site URL parameter. The connected documents confirm the vulnera...

joomlaradio-rfi.txt

Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...

Joomla! Component Joomlaradio 5.0 - Remote File Inclusion

Joomla Radio v5 Component RFI Bug in : administrator/components/comjoomlaradiov5/admin.joomlaradiov5.php Variable : $mosConfiglivesite Download : http://www.joomlaos.de/option,comremository/Itemid,41/func,fileinfo/id,2661.html Dork: inurl:"comjoomlaradiov5" Example:...

Unfixed XSS vulnerability at radio.xmlstoragesystem.com

Security researcher Narcoticxs, has submitted on 18/03/2007 a cross-site-scripting XSS vulnerability affecting radio.xmlstoragesystem.com, which at the time of submission ranked 15880 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/03/2007. ...

Memory corruption

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 is affected by CVE-2007-1008 where a crafted XML list of radio stations can cause a denial of service via memory corruption. The issue is user‑assisted remote in nature and relies on the XML document being retrieved from a static URL, which implies an attacker must perform DNS ...

iTunes remote memory corruption vulnerability

Hi, iTunes for both macosx and win is prone to a remote memory corruption vulnerability when parsing xml. iTunes will parse xml when it contacts a touning server which will return the list of radio channels in that format. To trigger this bug is sufficent to send to iTunes an xml file containing...

XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

xlnc-rfi.txt

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $ $ Title : XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln. $ Author : Gokhan $ Site : http://www.xlnc1.org/nuke $ Contact : [email protected] | [email protected] $ $ Vuln Code : iframe.php $ $...

Mercora IMRadio Detection

Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. OpenVAS Vulnerability Test $Id: mercoraimradioinstalled.nasl...

Mercora IMRadio Detection

Mercora IMRadio is installed on the remote host. Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities. This software may not be suitable for use in a business environment. Josh Zlatin-Amishav GPLv2 include"compat.inc"; if description...

HTML.cobble

Sunday, April 1, 2001 Default installation of Internet Explorer 5.5 with all of its so-called patches, service "packs" etc, still allows us to execute files on default installations of the target computer: Once Again: We cobble together new and old Components as follows : - 1. Courtesy of Georgi...