Remote file inclusion

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-1968

CVE-2006-1968 describes a cross-site scripting (XSS) vulnerability in KCScripts News Publisher (Portal Pack 6.0 and earlier) affecting the news/NsVisitor.cgi component. The issue arises from the sort_order parameter, allowing remote attackers to inject arbitrary web script or HTML. Public sources...

CVE-2004-1968

Open Bulletin Board (OpenBB) before version 1.0.6 contains a vulnerability in the readmsg action of myhome.php that allows remote attackers to read arbitrary messages by modifying the id parameter. The affected component is the readmsg functionality; underlying cause is improper validation of the...

CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2002-1968

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...