148 matches found
FreeBSD : dokuwiki -- Local File Inclusion with register_globals on (4f838b74-50a1-11de-b01f-001c2514716c)
DokuWiki reports : A security hole was discovered which allows an attacker to include arbitrary files located on the attacked DokuWiki installation. The included file is executed in the PHP context. This can be escalated by introducing malicious code through uploading file via the media manager o...
CVE-2009-1960
creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8812 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8781...
CVE-2008-1960
CVE-2008-1960 describes a Cross-site Scripting (XSS) vulnerability in ContRay 3.x, affecting the CGI script cgi-bin/contray/search.cgi via the search parameter. Remote attackers can inject arbitrary web script or HTML. Per NVD data, the attack is network-delivery with medium complexity and no aut...
CVE-2007-1960
The CVE-2007-1960 entry describes an SQL injection in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS (and possibly versions up to 1.10). The vulnerability occurs in visit.php via the lid parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected docum...
CVE-2006-1960
The CVE-2006-1960 issue affects CiscoWorks WLSE and WLSE Express prior to 2.13 in their appliance web UI. The vulnerability is an XSS flaw in the archiveApplyDisplay.jsp path, likely via the displayMsg parameter, enabling remote attackers to inject arbitrary web script/HTML. The connected sources...
CVE-2002-1960
CVE-2002-1960 concerns a cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 . The flaw allows remote attackers to inject arbitrary web script or HTML via an HTML link. According to NVD, the vulnerability has a Medium severity (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with no confidential...
CVE-2004-1960
Protector System 1.15b1 has a Cross‑Site Scripting (XSS) vulnerability in blocker_query.php that allows remote attackers to inject arbitrary web script or HTML via the (1) target or (2) portNum parameters. The CVE-2004-1960 entry notes a MEDIUM severity (CVSSv2 base 4.3) with Network attack vecto...
