21 matches found
EUVD-2007-0701
Malware in sbrugna...
EUVD-2006-4657
Malware in sbrugna...
CVE-2006-7006
PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...
Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability
No description provided by source. Update: 16:01 09/08/06 Subject: Somery 0.4skindirRemote File Inclusion Exploit Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as th...
CVE-2006-7006
PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...
CVE-2006-7006
CVE-2006-7006 concerns Robin de Graff Somery 0.4.4, where a PHP remote file inclusion through upload/admin/team.php could allow arbitrary PHP execution via a URL in the checkauth parameter. Red Hat/NVD entries reiterate the description but also include a note that CVE disputes this vulnerability ...
CVE-2006-7006
PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals...
PT-2007-1285 · Robin De Graff · Robin De Graff Somery
Name of the Vulnerable Software and Affected Versions: Robin de Graff Somery version 0.4.4 Description: A remote file inclusion issue in upload/admin/team.php allows remote attackers to potentially execute arbitrary PHP code via a URL in the checkauth parameter. However, it's noted that the...
CVE-2007-0704
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...
Remote file inclusion
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...
CVE-2007-0704
CVE-2007-0704 is a PHP remote file inclusion vulnerability in Somery 0.4.6. The issue arises via the skindir parameter in install.php, allowing remote code execution through a crafted URL. Connected sources confirm the vulnerable component is install.php (Somery 0.4.6) and note the remediation in...
CVE-2007-0704
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...
CVE-2006-4669
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...
CVE-2006-4669
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...
CVE-2006-4669
The CVE-2006-4669 entry describes a PHP remote file inclusion vulnerability in Somery 0.4.6 and earlier. Specifically, when register_globals is enabled, an attacker can craft a URL to the skindir parameter in admin/system/include.php to execute arbitrary PHP code on the affected system. The vulne...
Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability
No description provided by source. Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as...
Somery 0.4.6 - skin_dir Remote File Inclusion
Somery 0.4.6 - skindir Remote File Inclusion Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also...
Somery <= 0.4.6 (skin_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Somery = 0.4.6 skindir Remote File Include Vulnerability ============================================================ Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote Fil...
[SA21825] Somery "skindir" File Inclusion Vulnerability
TITLE: Somery "skindir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21825 VERIFY ADVISORY: http://secunia.com/advisories/21825/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Somery 0.x http://secunia.com/product/11898/ DESCRIPTION: basher13 has reported a...
Somery 0.4.6 - 'skin_dir' Remote File Inclusion
Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as the Somery weblogging system...