Show filters
34 Total Results
Displaying 11-20 of 34
Sort by:
Attacker Value
Unknown
CVE-2009-1573
Disclosure Date: May 06, 2009 (last updated October 04, 2023)
xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic cookie (MCOOKIE) on the command line, which allows local users to gain privileges by listing the process and its arguments.
0
Attacker Value
Unknown
CVE-2008-3269
Disclosure Date: July 24, 2008 (last updated October 04, 2023)
WRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet to TCP port 4321.
0
Attacker Value
Unknown
CVE-2008-1046
Disclosure Date: February 27, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the op[footer_body] parameter.
0
Attacker Value
Unknown
CVE-2007-6179
Disclosure Date: November 30, 2007 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccms_library_path parameter to (1) markdown.php and (2) gallery.php in decoder/.
0
Attacker Value
Unknown
CVE-2007-2757
Disclosure Date: May 18, 2007 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to (1) wp-content/themes/redoable/searchloop.php or (2) wp-content/themes/redoable/header.php.
0
Attacker Value
Unknown
CVE-2006-4425
Disclosure Date: August 29, 2006 (last updated October 04, 2023)
Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter in coin_includes scripts including (1) api.php, (2) common.php, (3) core.php, (4) custom.php, (5) db.php, (6) redirect.php or (7) session_set.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2006-4424
Disclosure Date: August 29, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter.
0
Attacker Value
Unknown
CVE-2006-2422
Disclosure Date: May 17, 2006 (last updated October 04, 2023)
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".
0
Attacker Value
Unknown
CVE-2006-2241
Disclosure Date: May 09, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: This is a different vulnerability than CVE-2006-2175.
0
Attacker Value
Unknown
CVE-2006-2175
Disclosure Date: May 04, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) show.php or (2) top.php.
0
