alfons luja vulnerabilities and exploits

(subscribe to this query)

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS (aka Flatnuke3) 2009-01-27 and 2009-02-04, when register_globals is enabled and magic_quotes_gpc disabled, allows remote malicious users to execute arbitrary PHP code via a URL in the _FNROOTPATH parame...

Flatnux Flatnux 2009-01-27 Flatnux Flatnux 2009-02-04

1 EDB exploit

Format string vulnerability in MemeCode Software i.Scribe 1.88 up to and including 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handle...

Memcode I.scribe 2.00 Memcode I.scribe 1.90 Memcode I.scribe 1.89 Memcode I.scribe 1.88

1 EDB exploit

Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote malicious users to read the source code of .php files, and possibly the content of other files, via a .. (dot dot) in the list parameter.

Minigal Minigal B13

1 EDB exploit

Directory traversal vulnerability in data/modules/blog/module_pages_site.php in Pluck 4.6.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the post parameter.

Pluck-cms Pluck 4.6.1

1 EDB exploit

Directory traversal vulnerability in code/track.php in FuzzyLime 3.03 allows remote malicious users to include and execute arbitrary local files via directory traversal sequences in the p parameter, a different vector than CVE-2007-4805 and CVE-2008-3165.

Fuzzylime Fuzzylime Cms 3.03

1 EDB exploit

VicFTPS 5.0 allows remote malicious users to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash, backward slash, forward slash). NOTE: this might be the same issue as CVE-2008-2031.

Vicftps Vicftps 5.0

1 EDB exploit

VicFTPS 5.0 allows remote malicious users to cause a denial of service (crash) via a crafted LIST command, which triggers a NULL pointer dereference. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Vicftps Vicftps 5.0

1 EDB exploit

Stack-based buffer overflow in W3C Amaya Web Browser 11.1 allows remote malicious users to execute arbitrary code via a script tag with a long defer attribute.

3 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook