Revenge

**Name of the Vulnerable Software and Affected Versions** ProFTPD versions prior to 1.3.1rc1 **Description** The issue is a stack-based buffer overflow in the `pr ctrls recv request` function, located in the `ctrls.c` file of the `mod ctrls` module. This allows local users to execute arbitrary code by providing a large `reqarglen` length value. **Recommendations** For versions prior to 1.3.1rc1, update to version 1.3.1rc1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ContentNow versions 1.39 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `pageid` parameter in index.php. This can also be leveraged for path disclosure with an invalid `pageid` parameter. **Recommendations** For ContentNow versions 1.39 and earlier, avoid using the `pageid` parameter in the affected index.php file until a fix is available. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Etomite version 0.6.1.2 **Description** The issue allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the `f` parameter. This can be demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php. **Recommendations** For Etomite version 0.6.1.2, consider restricting access to the `f` parameter in the manager/index.php file to prevent directory traversal attacks. As a temporary workaround, restrict the ability of administrators to include local files using the .. (dot dot) sequence in the `f` parameter until a patch is available.