PT-2011-2864

Name of the Vulnerable Software and Affected Versions FocalMedia.Net Quick Polls versions prior to 1.0.2 Description The issue allows remote attackers to read or delete arbitrary files due to directory traversal vulnerabilities. This can be achieved by using a .. dot dot in the p parameter in...

CVE-2011-1099: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in FocalMedia.Net Quick Polls before 1.0.2 allow remote attackers to 1 read arbitrary files via a .. dot dot in the p parameter in a preview action to index.php, or 2 delete arbitrary files via a .. dot dot in the p parameter in a delete action to...

CVE-2011-0909: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526...

PT-2011-2752

Name of the Vulnerable Software and Affected Versions Vanilla Forums versions prior to 2.0.17.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component. Recommendations For versions prior to...

PT-2010-5422

Name of the Vulnerable Software and Affected Versions Pulse CMS Basic versions prior to 1.2.9 Description The issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the p parameter to "index.php". Recommendations For versions prior to...

CVE-2010-4330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to index.php...

CVE-2010-1268: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1043: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in jaxCMS 1.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2010-0682

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter...

CVE-2010-0682

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter...

CVE-2010-0682: Undefined Security Weakness

WordPress 2.9 before 2.9.2 allows remote authenticated users to read trash posts from other authors via a direct request with a modified p parameter...

CVE-2009-3664: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a .. dot dot in the 1 p and 2 s parameters...

CVE-2008-6469: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PlainCart 1.1.2 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-6019: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EACOMM DO-CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the p parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0330

Directory traversal vulnerability in index.php in Simple Content Management System SCMS 1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the p parameter...

CVE-2008-5953: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter to the default URI...

CVE-2008-5264

Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...

CVE-2008-5264: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...

CVE-2008-4732: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajaxcomments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2008-4592: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter...