Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the ad_direct parameter. Date published : 2006-10-30 http://www.securityfocus.com/bid/20789 https://www.exploit-db.com/exploits/2677
Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. (dot dot) sequence in the file...
Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors. Date published : 2006-10-30 http://www.securityfocus.com/bid/20776 http://security.gentoo.org/glsa/glsa-200704-04.xml
PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfg[txpath] parameter. Date published : 2006-10-30 http://www.securityfocus.com/bid/20769...
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results...
PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter Date published : 2006-10-30 http://www.securityfocus.com/bid/20783 https://www.exploit-db.com/exploits/2666
PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter. Date published : 2006-10-30 http://www.securityfocus.com/bid/20750...
Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of details in the vendor advisory, it is not...
PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter....
Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "../" sequences in the dir parameter. Date published : 2006-10-30 http://www.securityfocus.com/bid/20771 http://www.securityfocus.com/archive/1/449893/100/0/threaded
SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs." Date published : 2006-10-30 http://www.securityfocus.com/bid/20759 http://drupal.org/node/91358
Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified dot dot) sequences in the getpage parameter. Date published : 2006-10-30 http://www.securityfocus.com/bid/20696/info http://www.securityfocus.com/archive/1/449504/100/0/threaded
Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web script or HTML via the CardFontFace parameter and other unspecified parameters. Date published : 2006-10-30 http://securitytracker.com/id?1017070 https://exchange.xforce.ibmcloud.com/vulnerabilities/29616
Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CardLanguageFile parameter. Date published : 2006-10-30 http://securitytracker.com/id?1017070 https://exchange.xforce.ibmcloud.com/vulnerabilities/29615