CVE-2008-6403

The CVE-2008-6403 issue affects OpenRat 0.8-beta4 and earlier, where a PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php allows an attacker to execute arbitrary PHP code via a URL parameter (tpl_dir). The underlying cause is improper handling of the tpl_dir par...

CVE-2008-6066

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...

CVE-2008-6066

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamelarootpath parameter...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action...

CVE-2008-5583

The CVE-2008-5583 entry describes a cross-site request forgery in ProjectPier 0.8 and earlier, where an attacker can cause actions as an administrator through the index.php query string (e.g., delete project). Affected software: ProjectPier 0.8 and earlier. Root cause: CSRF in index.php allowing ...

PT-2008-6645 · Projectpier · Projectpier

Name of the Vulnerable Software and Affected Versions: ProjectPier versions 0.8 and earlier Description: The issue allows remote attackers to inject arbitrary web script or HTML via various means, including a message, a milestone, or a display name in a profile, or the a or c parameter to...

CVE-2008-2378

The CVE-2008-2378 issue concerns the hf HF kernel component (hfkernel) used by the hf package. The vulnerability is a local untrusted-search-path flaw that could allow privilege escalation via a Trojan horse killall executable found in a PATH directory, related to improper handling of the -k opti...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in PHP-Crawler 0.8 allows remote attackers to execute arbitrary PHP code via a URL in the footerfile parameter...

Gentoo Security Advisory GLSA 200401-02 (honeyd)

The remote host is missing updates announced in advisory GLSA 200401-02. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

CVE-2008-4137

CVE-2008-4137 affects PHP-Crawler 0.8; vulnerability is a PHP remote file inclusion via the footer_file parameter, allowing remote code execution. CVSS v2 base score 7.5 (HIGH). Public exploits/advisories exist (e.g., Exploit-DB, SecurityFocus) per references. No remediation details provided in t...

PHP Crawler 0.8 (footer) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Crawler 0.8 footer Remote File Inclusion Vulnerability ============================================================ Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability...

PHP Crawler 0.8 - Remote File Inclusion

Piker PHP-Crawler v0.8 Remote File Inclusion Vulnerability Affected software: PHP-Crawler 0.8 Vendor: http://sourceforge.net/projects/php-crawler/ Risk: Critical http://target/path/footer.php?footerfile=SHELL Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researchers www.domlabs.org...

Meet#Web 0.8 - modules.php?root_path Remote File Inclusion

MeetWeb 0.8 - modules.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

Meet#Web 0.8 - RegRightsResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegRightsResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacke...

Meet#Web 0.8 - 'RegRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Sql injection

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1164

SQL injection vulnerability in index.php in phpComasy 0.8 allows remote attackers to execute arbitrary SQL commands via the modprojectid parameter in a projectdetail action...

CVE-2008-1164

CVE-2008-1164 affects phpComasy 0.8, specifically the index.php in the project_detail action, where the parameter mod_project_id is susceptible to SQL injection . This allows remote attackers to execute arbitrary SQL commands. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network at...