JCE Admin Component for Joomla! 'plugin' Parameter Local File Include

The version of the JCE Admin component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'plugin' parameter before using it in the components/comjce/jce.php script to include PHP code. Regardless of...

phpWebThings core/editor.php editor_insert_bottom Parameter Remote File Inclusion

The remote web server is running phpWebThings, a PHP based photo gallery management system. The version of phpWebThings installed on the remote host fails to sanitize input to the 'editorinsertbottom' parameter before using it in the 'core/editor.php' script to include PHP code. Provided PHP's...

PHP Easy Download admin/save.php moreinfo Parameter Code Injection

The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially crafted value, an attacker can store and execute code at the privilege level of the remote web server. %NASLMINLEVEL...

Serendipity serendipity_event_bbcode.php Script serendipity[charset] Parameter Local File Inclusion

The 'plugins/serendipityeventbbcode/serendipityeventbbcode.php' script included with the version of Serendipity installed on the remote host fails to sanitize input to the 'serendipitycharset' parameter before using it to include PHP code. Provided PHP's 'registerglobals' setting is enabled, an...

WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection

The remote version of Burning Board Lite fails to sanitize user- supplied cookie input before using it in the 'decodecookie' function in a database query. Regardless of PHP settings, an unauthenticated attacker may be able to leverage this issue to uncover sensitive information such as password...

WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection

The remote version of Burning Board Lite fails to sanitize input to the 'wbbuserid' parameter before using it in a database query. Provided PHP's 'registerglobals' setting is enabled and 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncove...

MODx CMS base_path Parameter Remote File Inclusion

The remote web server is running MODx CMS, an open source content management system. The version of MODx CMS installed on the remote host fails to sanitize input to the 'basepath' parameter before using it in the 'manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php' script to includ...

Exhibit Engine styles.php toroot Parameter Remote File Inclusion

The remote web server is running Exhibit Engine, a PHP based photo gallery management system. The version of Exhibit Engine installed on the remote host fails to sanitize input to the 'toroot' parameter before using it in the 'styles.php' script to include PHP code. Provided PHP's 'registerglobal...

PunBB include/common.php language Parameter Local File Inclusion

The version of PunBB installed on the remote host fails to sanitize input to the 'language' parameter before storing it in the 'register.php' script as a user's preferred language setting. By registering with a specially crafted value, an attacker can leverage this issue to view arbitrary files a...

miniBB bb_func_txt.php pathToFiles Parameter Remote File Inclusion

The remote web server is running MiniBB, an open source forum software. The version of MiniBB installed on the remote host fails to sanitize input to the 'pathToFiles' parameter before using it in the 'bbfunctxt.php' script. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated...

Grep with web vulnerabilities mining+a WIN under the GREP Software-bug warning-the black bar safety net

a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin ported to the grephttp://zhouzhen.eviloctal.org/Look.asp?LogID=814 b. A...

Solaris/SPARC 2.7 / 7 locale Format String Exploit

No description provided by source. / Exploit for the locale format string vulnerability in Solaris/SPARC 2.7 / 7 Based on the exploit by Warning3 [email protected] For additional information see http://www.phreedom.org/solar/localesol.txt By Solar Eclipse [email protected] Assistant...

Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion

The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to sanitize input to the 'themesdir' parameter before using it in the 'themes/program/themesettings.inc.php' scri...

Hosting Controller Multiple Script ForumID Parameter SQL Injection

The installed version of Hosting Controller fails to sanitize input to the 'ForumID' parameter of the 'forum/HCSpecific/EnableForum.asp' script before using it in database queries. An unauthenticated attacker may be able to leverage this issue to manipulate database queries to reveal sensitive...

Horde Ingo Software Detection

The remote host is running Ingo, a PHP-based application from the Horde Project for managing email filter rules. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid22899; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Open Conference System < 1.1.6 Multiple Script fullpath Parameter Remote File Inclusion

The remote host is using Open Conference System, a PHP application for managing scholarly conference websites. The version of Open Conference System installed on the remote host fails to sanitize input to the 'fullpath' parameter before using it to include PHP code in the 'include/theme.inc.php'...

phpMyConferences menus.inc.php lvc_include_dir Parameter Remote File Inclusion

The remote host is using phpMyConferences, a conference management system written in PHP. The version of phpMyConferences installed on the remote host fails to sanitize input to the 'lvcincludedir' parameter before using it to include PHP code in the 'common/visiteurs/include/menus.inc.php' scrip...

BlueShoes lib/googlesearch/GoogleSearch.php APP[path][lib] Parameter Remote File Inclusion

The remote host is using BlueShoes, an application framework and content management system written in PHP. The version of BlueShoes installed on the remote host fails to sanitize input to the 'APPpathlib' parameter before using it to include PHP code in the 'lib/googlesearch/GoogleSearch.php'...

Mambo Open Source usercookie Parameter SQL Injection

The remote installation of Mambo Open Source fails to sanitize input to the 'usercookie' cookie array before using it in a database query to authenticate a user. Provided PHP's 'magicquotesgpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries and,...

DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution

The remote host is running DokuWiki, an open source wiki application written in PHP. The installed version of DokuWiki fails to properly sanitize input to the 'w' and 'h' parameters of the 'lib/exe/fetch.php' script before using it to execute a command when resizing images. An unauthenticated...