PT-2006-7460 · Enigma · Enigma Wordpress Bridge +1

Name of the Vulnerable Software and Affected Versions: Enigma WordPress Bridge affected versions not specified Description: The issue concerns a PHP remote file inclusion vulnerability in the Enigma2 plugin, specifically in the Enigma2.php file. This vulnerability allows remote attackers to execu...

Unpatchable Quicktime XSS

More / Resource: http://mxcore.com/?go=forums&thread=103 The QuickTime texttrack exploit might be fixed, but there are many more methods of executing code via quicktime. One way, is to make a mx.mov file in notepad This is not a texttrack. Will not be patched in the next version of Quicktime. So,...

PT-2006-6670 · Bloo · Bloo

Name of the Vulnerable Software and Affected Versions: Bloo versions 1.0 Description: A remote file inclusion issue in phoo.base.php allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter. This issue is disputed, as $descriptorFileList is used within a...

PT-2006-6519 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: The issue allows remote authenticated users to upload and execute arbitrary PHP code. This is achieved by setting the upload parameter to 1 in the index.php file. Recommendations: For Speedywiki version 2.0...

PerlDesk Language Variable - Server-Side Script Execution

PerlDesk Language Variable - Server-Side Script Execution source: https://www.securityfocus.com/bid/11160/info It is reported that PerlDesk is susceptible to a server-side script execution vulnerability. This vulnerability may be exploited to execute the contents of Perl scripts contained on the...