CuteNews inc/function.php archive Parameter Arbitrary File Access

The version of CuteNews installed on the remote host fails to properly sanitize the 'archive' parameter before using it to read a news file and return it. An unauthenticated, remote attacker may be able to leverage this issue to read arbitrary files on the remote host subject to permissions of th...

Horde go.php url Parameter Arbitrary File Access

The version of Horde installed on the remote host fails to validate input to the 'url' parameter of the 'services/go.php' script before using it to read files and return their contents. An unauthenticated attacker may be able to leverage this issue to retrieve the contents of arbitrary files on t...

Simple PHP Blog install05.php blog_language Parameter Local File Inclusion

The version of Simple PHP Blog installed on the remote host fails to sanitize input to the 'bloglanguage' parameter of the 'install05.php' script before using it in a PHP 'requireonce' function. An unauthenticated attacker may be able to exploit this issue to view arbitrary files or to execute...

MyBB search.php 'forums' Parameter SQLi

The version of MyBB running on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'forums' parameter of the search.php script. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of...

Gallery stepOrder Parameter Local File Inclusion

The version of Gallery hosted on the remote web server fails to sanitize input to the 'stepOrder' parameter of the 'upgrade/index.php' and 'install/index.php' scripts before using it in a PHP 'require' function. An unauthenticated attacker may be able to exploit this issue to view arbitrary files...

SquirrelMail strings.php base_uri Parameter Information Disclosure

The version of SquirrelMail installed on the remote host fails to check the origin of the 'baseuri' parameter in the 'functions/strings.php' script before using it to set the path for its cookies. An attacker may be able to leverage this issue to steal cookies associated with the affected...

Owl Intranet Engine lib/OWL_API.php xrms_file_root Parameter Remote File Inclusion

The remote host is running Owl Intranet Engine, a web-based document management system written in PHP. The version of Owl Intranet Engine on the remote host fails to sanitize user-supplied input to the 'xrmsfileroot' parameter of the 'lib/OWLAPI.php' script before using it in a PHP 'requireonce'...

Woltlab Burning Board Multiple SQL Injections

The remote version of Burning Board includes an optional module, the Database module, that fails to properly sanitize the 'fileid' parameter of the 'infodb.php' script, which can be exploited to launch SQL injection attacks against the affected host. %NASLMINLEVEL 70300 C Tenable Network Security...

4Images <= 1.7.1 index.php template Parameter Traversal Local File Inclusion

4Images is installed on the remote system. It is an image gallery management system. The installed application does not validate user-input passed in the 'template' variable of the 'index.php' file. This allows an attacker to execute directory traversal attacks and display the content of sensitiv...

HP System Management Homepage (SMH) on Windows Namazu lang Parameter Traversal Arbitrary File Access

The version of HP System Management Homepage installed on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazu.cgi' script. An attacker may be able to exploit this issue to access files on the remote hos...

Coppermine Photo Gallery showdoc.php f Parameter Local File Inclusion

The installed version of Coppermine Photo Gallery fails to sanitize user input to the 'f' parameter in the 'docs/showdoc.php' script before using it in a PHP 'include' function. An unauthenticated attacker may be able to exploit this flaw to view arbitrary files or to execute arbitrary PHP code,...

NOCC <= 1.0 Multiple Vulnerabilities

The remote host is running NOCC, an open source webmail application written in PHP. The installed version of NOCC is affected by a local file include flaw because it fails to sanitize user input to the 'lang' parameter of the 'index.php' script before using it to include other PHP files. Regardle...

Plume CMS < 1.0.3 Remote File Inclusion

The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the 'prepend.php' file. This allows an attacker to include arbitrary files and execute code on the system. This flaw is...

Flyspray install-0.9.7.php adodbpath Parameter Remote File Inclusion

The remote host is running Flyspray, an open source, web-based, bug tracking system written in PHP. The installed version of Flyspray contains an installation script that does not require authentication and that fails to sanitize user input to the 'adodbpath' parameter before using it in a PHP...

NeoMail neomail.pl sort Parameter XSS

The remote host is running NeoMail, an open source webmail application written in Perl. The installed version of this software fails to validate the 'sort' parameter in the 'neomail.pl' script before using it to generate dynamic content. An attacker may be able to exploit this issue to inject...

RunCMS Multiple Script bbPath Parameter Remote File Inclusion

The installed version of RunCMS fails to validate user input to the 'bbPath' parameter of two scripts. An unauthenticated attacker may be able to leverage this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts. Note that...

PHP iCalendar Multiple Script Remote File Inclusion

The remote host appears to be running PHP iCalendar, a web-based iCal file viewer / parser written in PHP. The installed version of PHP iCalendar fails to validate user input to the 'getdate' parameter of the 'search.php' script as well as the 'file' parameter of 'template.php' script. Provided...

Loudblog backend_settings.php Multiple Parameter Remote File Inclusion

The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The installed version of Loudblog fails to validate user input to the 'GLOBALSpath' and 'language' parameters before using them in the 'loudblog/inc/backendsettings.php' script in a PHP 'includ...

Website Baker Admin Login SQL Injection

The remote host is running Website Baker, a PHP-based content management system. The installed version of Website Baker fails to validate user input to the username parameter of the 'admin/login/index.php' script before using it to generate database queries. An unauthenticated attacker can levera...

Invision Power Board Dragoran Portal Module index.php site Parameter SQL Injection

The installation of Invision Power Board on the remote host contains an optional plugin module known as Dragoran Portal that fails to sanitize input to the 'site' parameter of the 'index.php' script before using it in database queries. An attacker may be able to leverage this issue to disclose...