7907 matches found
CVE-2006-2666
V-Webmail versions 1.5–1.6.4 contain a PHP remote file inclusion flaw in includes/mailaccess/pop3.php. An attacker can pass a URL via CONFIG[pear_dir] to achieve remote PHP code execution on the affected server. This CVE (CVE-2006-2666) explicitly describes arbitrary code execution through that p...
CVE-2006-2665
Vulnerability CVE-2006-2665 affects V-Webmail 1.3 via PHP remote file inclusion in includes/mailaccess/pop3/core.php. Attackers can include remote PHP via CONFIG[pear_dir], enabling arbitrary code execution. Affected: V-Webmail 1.3; vulnerability details and an associated exploit exist (e.g., exp...
CVE-2006-2666
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGpeardir parameter...
Multiple Xss exploits in ar-blog v 5.2
Multiple Xss exploits in ar-blog v 5.2 forum type : ar-blog v 5.2 bug found by : black-code team : site-down type : Xss black-code: http://www.xxx.com/path/index.php?page=gb&count=next='scriptalert10/script http://www.xxx.com/path/index.php?page=gb&count='scriptalert10/script...
DGNews v 1.5 File Upload Vuln.
DGNews v 1.5 File Upload Vuln. Vuln. discovered by : r0t Date: 29 may 2006 vendor:www.diangemilang.com/dgscripts.php affected versions:v 1.5 and prior orginal advisory: http://pridels.blogspot.com/2006/05/dgnews-v-15-file-upload-vuln.html Vuln. Description: It is possible to upload arbitrary file...
V-Webmail 1.6.4 Remote File Include
Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford xbefordx gmail com Vulnerable File v-webmail/includes/pear//.php =...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== V-Webmail Vulnerable File v-webmail/includes/pear//.php = requireonce $CONFIG'peardir' . '.php'; v-webmail/includes/mailaccess/pop3.php = requireonce$CONFIG'peardir'...
V-Webmail 1.6.4 - pear_dir Remote File Inclusion
V-Webmail 1.6.4 - peardir Remote File Inclusion Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford Vulnerable File...
V-Webmail <= 1.6.4 (pear_dir) Remote File Include Vulnerability
No description provided by source. Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford xbefordx gmail com Vulnerable File...
V-Webmail 1.6.4 - 'pear_dir' Remote File Inclusion
Script: V-Webmail 1.6.4 Vendor: http://www.v-webmail.org/ Description: V-webmail is a powerful PHP based webmail application with an abundance of features, including many innovative ideas for web applications Discovered: beford Vulnerable File v-webmail/includes/pear//.php = requireonce...
CVE-2002-2212
CVE-2002-2212 affects the DNS resolver in Fujitsu UXP/V. The vulnerability allows remote attackers to perform DNS cache poisoning through a birthday-attack using many concurrent DNS queries and spoofed responses, increasing the chance of a correct spoofed reply more efficiently than brute force. ...
CVE-2002-2212
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record RR combined with spoofed response...
Fusion News v.1.0 (fil_config) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; Exploit coded by: X0r1 Bug found by: X0r1 release: 21.05.06 vulnerable code in sources\post.php at lines 32-35: ---------------------------------------------------------------------------------- ... global $VARS, $TEMPLATE, $fillan...
[Full-disclosure] Quagga RIPD unauthenticated route table broadcast
Arhont Ltd - Information Security Advisory by: Konstantin V. Gavrilenko http://www.arhont.com Arhont ref: arh200604-1 Advisory: Quagga RIPD unauthenticated route table broadcast Class: design bug? Version: Tested on Quagga suite v0.98.5 v0.99.3Gentoo, 2.6.15 Model Specific: Other versions might...
Input validation
Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VCCRYPTOMETHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the 1 encrypt and 2 decrypt functions...
CVE-2006-1599
Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VCCRYPTOMETHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the 1 encrypt and 2 decrypt functions...
CVE-2006-1599
Vulnerability CVE-2006-1599 affects v-creator before 1.3-pre3, in VCEngine.php when VC_CRYPTO_METHOD is OPENSSL. Root cause appears to be issues in the encrypt and decrypt functions, enabling remote command execution. The available sources indicate the vulnerability resides in the crypto handling...
[SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability
TITLE: v-creator VCEngine.php Shell Command Injection Vulnerability SECUNIA ADVISORY ID: SA19453 VERIFY ADVISORY: http://secunia.com/advisories/19453/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: v-creator 1.x http://secunia.com/product/9080/ DESCRIPTION: A...
Design/Logic Flaw
help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0793
frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...