5658 matches found
[SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1251-1 [email protected] http://www.debian.org/security/ Steve Kemp January 21, 2007 - ------------------------------------------------------------------------ Package : netrik Vulnerability :...
cacti086i-remote.txt
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,...
CVE-2006-6690
rtehtmlarea/pi1/class.txrtehtmlareapi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to...
CVE-2006-6678
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2006-6678
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
DEBIAN-CVE-2006-6678
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2006-6678
Summary: CVE-2006-6678 affects netrik prior to 1.15.5 (noted fixes in 1.15.4-1sarge1 per Debian DSA-1251-1). The edit_textarea function in form-file.c does not properly sanitize temporary filenames when editing textarea fields, enabling an attacker to inject shell metacharacters in the filename t...
CVE-2006-6678
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2006-6678
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2006-6678: Undefined Security Weakness
The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...
CVE-2006-6690: Undefined Security Weakness
rtehtmlarea/pi1/class.txrtehtmlareapi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to...
CVE-2006-6599
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...
CVE-2006-6599
The CVE-2006-6599 issue affects TorrentFlux 2.2, where maketorrent.php may allow remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter. This is a command-injection vulnerability through a user-controlled parameter, leading to p...
CVE-2006-6599
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...
CVE-2006-6599: Undefined Security Weakness
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters ";" semicolon in the announce parameter...
CVE-2006-5875: Undefined Security Weakness
eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...
CVE-2006-5875
eoc.py in Enemies of Carlotta EoC before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address"...
CVE-2006-6454: Undefined Security Weakness
execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the 1 exe and 2 args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained...
