CakePHP vendors.php file Parameter Traversal Arbitrary File Access

The remote host is running CakePHP, an open source rapid development framework for PHP. The version of CakePHP on the remote host allows directory traversal sequences in the 'file' parameter of the 'js/vendors.php' script. An unauthenticated attacker may be able to leverage this flaw to view...

Exponent CMS index.php view Parameter Local File Inclusion

The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to properly sanitize user-supplied input to the 'view' parameter before using it in the 'modules/calendarmodule/class.php' script to...

Derby Network Server Detection

The remote host is running a Derby formerly Cloudscape Network Server, which allows for network access to the Derby database engine on that host. Derby itself is a Java-based relational database developed by the Apache Software Foundation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Claroline claro_init_local.inc.php extAuthSource[newUser] Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'extAuthSource' parameter array before using it to include PHP code in the...

Site@School Multiple Script cmsdir Parameter Remote File Inclusion

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of Site@School installed on the remote host fails to sanitize input to the 'cmsdir' parameter before using it to include PHP code in several scripts. Provided PHP...

Dokeos claro_init_local.inc.php extAuthSource Parameter Array Remote File Inclusion

The remote host is running Dokeos, an open source, e-learning and course management web application written in PHP. The version of Dokeos installed on the remote host fails to sanitize input to the 'extAuthSource' parameter array before using it to include PHP code in the...

TWiki 'filename' Parameter Traversal Arbitrary File Access

The version of TWiki running on the remote host allows directory traversal sequences in the 'filename' parameter in the viewfile function of 'lib/TWiki/UI/View.pm'. An unauthenticated attacker can exploit this issue to view arbitrary files on the remote host subject to the privileges of the web...

SAP DB / MaxDB WebDBM Client Database Name Remote Overflow

The remote host is running SAP DB or MaxDB, a SAP-certified open- source database supporting OLTP and OLAP. According to its version, the Web DBM component of MaxDB on the remote host reportedly contains a buffer overflow that can be triggered by an HTTP request containing a long database name. A...

CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...

PHProjekt <= 5.1 Multiple Remote File Inclusions

The remote host is running PHProjekt, an open source groupware suite written in PHP. The version of PHProjekt installed on the remote host fails to sanitize user-supplied input to the 'pathpre' parameter of the 'lib/specialdays.php' script as well as the 'libpath' parameter of the...

phpCOIN Multiple Script _CCFG Parameter Remote File Inclusion

The remote host is running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize input to the 'CCFG' array parameter before using it in several scripts to include PHP...

WebAdmin < 3.2.5 Multiple Vulnerabilities

The remote host is running WebAdmin, a web-based remote administration tool for Alt-N MDaemon. According to its banner, the installed version of WebAdmin fails to properly filter directory traversal sequences from the 'file' parameter of the 'logfileview.wdm' and 'configfileview.wdm' scripts. A...

Zen Cart autoload_func.php autoLoadConfig Array Remote File Inclusion

The version of Zen Cart installed on the remote host fails to sanitize input to the 'autoLoadConfig' array parameter before using it in 'includes/autoloadfunc.php' to include PHP code. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker may be able to exploit these...

Zen Cart ipn_main_handler.php custom SQL Injection

The version of Zen Cart installed on the remote host fails to properly sanitize input to the 'custom' parameter of the 'ipnmainhandler.php' script before using it in a database query. Provided PHP's 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to exploit this issu...

WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion

The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...

VHCS include/sql.php include_path Parameter Remote File Inclusion

The remote host is running VHCS, a control panel for hosting providers. The GUI portion of the version of VHCS installed on the remote host fails to sanitize input to the 'includepath' parameter of the 'include/sql.php' script before using it to include PHP code. Provided PHP's 'registerglobals'...

Mambo / Joomla! Component / Module 'mosConfig_absolute_path' Multiple Parameter Remote File Include Vulnerabilities

A third-party component for Mambo, Module, or Joomla! is running on the remote host. At least one of these components is a version that is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'mosConfigabsolutepath' parameter before using it t...

CentOS 3 / 4 : php (CESA-2006:0568)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

RHEL 3 / 4 : php (RHSA-2006:0568)

Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

SimpleBoard / Joomlaboard 'sbp' Parameter Remote File Include

The version of the SimpleBoard or Joomlaboard component for Mambo or Joomla! running on the remote host is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'sbp' parameter before using it in the fileupload.php or imageupload.php scripts to...