CVE-2007-1640

The CVE-2007-1640 entry describes multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by providing a URL via the BASE parameter to language.php and to phpadmin/survey.php. Impact is remote code execution w...

CVE-2005-1640

modchannel.bas in The Ignition Project ignitionServer 0.3.0 to 0.3.6, and possibly earlier versions, does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, which allows remote attackers to bypass intended restrictions...

CVE-2004-1640

The CVE-2004-1640 entry describes multiple cross-site scripting (XSS) vulnerabilities in XOOPS versions 0.94 and 1.0, exploitable via user-supplied input in two scripts: the terme parameter to search.php and the letter parameter to letter.php. The underlying issue is improper handling/sanitizatio...

CVE-2004-1640

Multiple cross-site scripting XSS vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the 1 terme parameter to search.php or 2 letter parameter to letter.php...