PBLang confirm.php code Variable Traversal Arbitrary File Access

Network Security News – Saturday, September 24, 2005 Events

PBLang confirm.php code Variable Traversal Arbitrary File Access

PBLang contains a flaw that allows a remote attacker to retrieve files from outside of the web path. The issue is due to the confirm.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the code variable.. Read more at osvdb.org/19630

PBLang delpost.php pid Variable Traversal Arbitrary File Access

PBLang contains a flaw that allows a remote attacker to retrieve files from outside of the web path. The issue is due to the delpost.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the pid variable.. Read more at osvdb.org/19632

PBLang editpost.php fid Variable Traversal Arbitrary File Access

PBLang contains a flaw that allows a remote attacker to retrieve files from outside of the web path. The issue is due to the editpost.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the fid variable.. Read more at osvdb.org/19631

PBLang post.php fid Variable Traversal Arbitrary File Access

PBLang contains a flaw that allows a remote attacker to retrieve files from outside of the web path. The issue is due to the post.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the fid variable.. Read more at osvdb.org/19629

PBLang register.php reg Variable Traversal Arbitrary File Access

PBLang contains a flaw that allows a remote attacker to retrieve files from outside of the web path. The issue is due to the register.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the reg variable.. Read more at osvdb.org/19633

OpenTTD network_server.c Format String

OpenTTD contains a flaw that may allow a malicious user to issue format commands to the network_server.c program. It is possible that the flaw may terminate the application (DoS) or execute commands, resulting in a loss of confidentiality, or availability.. Read more at osvdb.org/19621

OpenTTD texteff.c Remote Overflow

A remote overflow exists in texteff.c. The OpenTTD file fails to filter input sent to the texteff.c program resulting in a an overflow. With a specially crafted request, an attacker can cause a DoS resulting in a loss of availability.. Read more at osvdb.org/19624