MyServer 0.8 - Cross-Site Scripting

MyServer 0.8 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13578/info myServer is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

CVE-2005-1452

Serendipity before 0.8 allows Chief users to "hide plugins installed by other users."...

CVE-2005-1134

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 urlid or 2 entryid parameters...

CVE-2005-0264

The CVE-2005-0264 vulnerability affects Owl (intranet engine) versions 0.7 and 0.8. It is a cross-site scripting (XSS) issue in browse.php, exploitable via the (1) expand or (2) order parameters, allowing remote attackers to inject arbitrary scripts or HTML into pages viewed by other users. The u...

CVE-2005-0265

The CVE concerns OWL, specifically browsers.php in OWL 0.7 and 0.8, where multiple SQL injection flaws exist in the browse.php handler. The vulnerabilities allow remote attackers to submit crafted values via the (1) parent or (2) sortposted parameters, potentially causing arbitrary SQL execution ...

CVE-2005-0264

Multiple cross-site scripting XSS vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the 1 expand or 2 order parameter...

CVE-2004-1263

The CVE-2004-1263 issue affects ChangePassword 0.8. When installed setuid, local users can cause arbitrary code execution by manipulating the PATH to reference a malicious make program. The vulnerability stems from overriding PATH, allowing a locally executed, attacker-provided make to run with e...

Achievo 0.7/0.8/0.9 - Remote File Inclusion / Command Execution

source: https://www.securityfocus.com/bid/5552/info Achievo includes a PHP script which is used to generate JavaScript class.atkdateattribute.js.php. This script employs a number of PHP includeonce statements to call code contained in function libraries and grab configuration information. Attacke...