CVE-2007-1231

Multiple cross-site scripting XSS vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 database name, 2 table name, 3 ViewName, 4 view, 5 trigger, and 6 function fields in main.php and certain other files...

CVE-2007-1231: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 database name, 2 table name, 3 ViewName, 4 view, 5 trigger, and 6 function fields in main.php and certain other files...

CVE-2007-0596: Undefined Security Weakness

PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrary PHP code via a URL in the PFtopurl parameter...

CVE-2007-0558: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the MODULESDIR parameter...

vhostadmin 0.1 (MODULES_DIR) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ vhostadmin 0.1 MODULESDIR Remote File Inclusion Vulnerability ================================================================ | | \ | Dr Max Virus | / \ | | / / || \ / ...

CVE-2006-5522: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in 1 main.php or 2 user/account/main.php...

Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Fully Modded phpBB = 2021.4.40 Multiple File Include Vulnerabilities ===================================================================== Fully Modded phpBB 2 Remote Fi...

kawf &#40;config&#41; Remote File Include

kawf config Remote File Include --------------------------------------------------------------------------------------------- Kawf is a web forum written in PHP4 using MySQL v. 1.0 and all below -------------------------------------------------------------------------------------------- download ...

kawf &lt;= 1.0 (main.php) Remote File Include Vulnerability

No description provided by source. kawf config Remote File Include --------------------------------------------------------------------------------------------- Kawf is a web forum written in PHP4 using MySQL v. 1.0 and all below...

CVE-2006-5427: Undefined Security Weakness

PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when registerglobals is enabled or magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugpath parameter...

CVE-2006-5315

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

CVE-2006-5315: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter...

Ay System Solutions CMS &lt;= v2.6 &#40;main.php&#41; Remote File Inclusion Exploit

============================================================================================== Ay System Solutions CMS = v2.6 main.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor...

CVE-2006-4440: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathShowProcessHandle parameter...

CVE-2006-4074: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component comjd-wiki 1.0.2 and earlier for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-3110

Cross-site scripting XSS vulnerability in main.php in Chipmailer 1.09 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 betreff, 3 mail, and 4 text parameters...

CVE-2006-3110: Undefined Security Weakness

Cross-site scripting XSS vulnerability in main.php in Chipmailer 1.09 allows remote attackers to inject arbitrary web script or HTML via the 1 name, 2 betreff, 3 mail, and 4 text parameters...

CVE-2006-3111: Undefined Security Weakness

Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by 1 anfang, 2 name, 3 mail, 4 anrede, 5 vorname, 6 nachname, 7 gebtag, 8 gebmonat, and 9 gebjahr...

CVE-2006-3078: Undefined Security Weakness

Multiple SQL injection vulnerabilities in APBoard 2.2-r3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID parameter in board.php and 2 viewcatmod parameter in main.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Kamgaing Email System kmail 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 d parameter to main.php, ordner parameter to 2 main.php, or 3 webdisk.php, 4 draft parameter to compose.php, or 5 m, or 6 y...