CVE-2006-6743

phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or delete files, related to 1 users/include/domakeprofile.inc.php and 2 users/include/copy.inc.php...

CVE-2006-6743

phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or delete files, related to 1 users/include/domakeprofile.inc.php and 2 users/include/copy.inc.php...

Ciberia Content Federator 1.0 (path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl Portal Name : ciberia 1.0maquetacionsocio.php Remote File Inclusion Exploit BUG: Path/socios/maquetacionsocio.php?path=Dr.Trojan.TxT Vulnerable Code: 1-include "$path/datos/datossocios.php"; 2-include "$path/elementos/actos.php"; 3-include...

Debian DSA-1062-1 : kphone - insecure file creation

Sven Dreyer discovered that KPhone, a Voice over IP client for KDE, creates a configuration file world-readable, which could leak sensitive information like SIP passwords. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

advancedpoll202.txt

+-------------------------------------------------------------------- + + Advanced Poll v2.02 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Advanced Poll v2.02 + Venedor ...........: http://www.proxy2.de + Class...

Comdev eCommerce 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev eCommerce 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev eCommerce 3.1 + Venedor ...........: http://www.comdevweb.com + Class...

PHPSelect Web Development Division <= Remote File Inclusion

+-------------------------------------------------------------------- + + PHPSelect Web Development Division : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: PHPSelect Web Development Division + Venedor ...........:...

simpleboard110.txt

World Defacers Team ====================================== --------------------Summary---------------- eVuln ID: WD23 Vendor: SimpleBoard Mambo Component 1.1.0 Vendor's Web Site: mamboxchange.com/projects/simpleboard Class: Remote PoC/Exploit: Available Solution: Not Available Discovered by:...

AuditWizard information leak

Administrator password is logged into world-readable log file...

cutenews13.txt

Welcome people In World Defacers Team World Defacers Team ====================================== --------------------Summary---------------- eVuln ID: WD22 Vendor: CuteNews 1.3. Vendor's Web Site: http://cutephp.com/ Software: Live Customer Support Solution :- http://www.pansionat.net/novost/...

VMware ESX Server management interface logs passwords in cleartext in a world-readable file

Overview Certain versions of VMware ESX Server store passwords in a cleartext file that all users have read permissions to. Description Per the VMware ESX Server datasheet:ESX Server installs directly on the server hardware, or “bare metal,” and inserts a robust virtualization layer between the...

CVE-2006-4124

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...

CVE-2006-4124

The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUGFILE environment variable, which is used to create world-writable files when libXm is run from a setuid program...

[UNIX] Liblesstif Local Root (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2006-3997

PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...

CVE-2006-3997

PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...

CVE-2006-3997

WoWRoster (World of Warcraft Roster) before 1.5.x is affected by a PHP remote file inclusion in hsList.php, exploitable via the subdir parameter to execute arbitrary PHP code on the affected server. This vulnerability arises in WoWRoster’s handling of user-supplied URLs and could allow remote cod...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

CVE-2006-3495

AFP Server in Apple Mac OS X 10.3.9 and 10.4.7 stores reconnect keys in a world-readable file, which allows local users to obtain the keys and access files and folders of other users...

WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== WoW Roster = 1.70 /lib/phpbb.php Remote File Include Vulnerability =====================================================================...