Directory traversal

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...

CVE-2008-0458

CVE-2008-0458 describes a directory traversal vulnerability in SLAED CMS 2.5 Lite. The flaw exists in index.php’s newlang parameter, where a .. path component in the parameter can cause local file inclusion and arbitrary code execution. Affected component: function/sources.php (LITE version). Thi...

SLAED CMS 2.5 Lite (newlang) Local File Inclusion Vulnerability

No description provided by source. SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang, $language,...

SLAED CMS 2.5 Lite - newlang Local File Inclusion

SLAED CMS 2.5 Lite - newlang Local File Inclusion SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang,...

SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion

SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang, $language, $usercookiet; 783: if...

CVE-2007-6301

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-6301

Cross-site scripting XSS vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter...

CVE-2007-5699

Affected software: eIQnetworks Enterprise Security Analyzer (ESA) 2.5 and ESA License Manager

CVE-2003-1436

The CVE-2003-1436 entry concerns Nukebrowser (versions 2.1–2.5). A PHP remote file inclusion vulnerability exists in nukebrowser.php that allows an attacker to execute arbitrary PHP code via the filhead parameter. This is a classic file inclusion flaw that can lead to remote code execution, with ...

Remote file inclusion

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

CVE-2007-5138

CVE-2007-5138 is a PHP remote file inclusion vulnerability affecting lustig.cms BETA 2.5, reported as a flaw in forum/forum.php where an attacker could trigger arbitrary PHP code execution by supplying a URL in the view parameter. The vulnerability is documented across multiple sources (NVD and C...

CVE-2007-5138

PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the view parameter...

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion

lustig.cms Beta 2.5 - forum.php?view Remote File Inclusion lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC :...

lustig.cms Beta 2.5 - 'forum.php?view' Remote File Inclusion

lustig.cms BETA 2.5 forum.php view Remote File Inclusion Vulnerabilities D.Scripts : http://dfn.dl.sourceforge.net/sourceforge/lustig-cms/lustig.cmsbeta2.52.zip V.Code : Line 12 . 13 . 14 ifisset$view include $view; POC : /forum/forum.php?view=Shell milw0rm.com 2007-09-27...

CVE-2007-4920

SQL injection vulnerability in soportederechaw.php in PHP Webquest 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the idactividad parameter...

PHP Webquest 2.5 - id_actividad SQL Injection

PHP Webquest 2.5 - idactividad SQL Injection / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot...

PHP Webquest 2.5 - 'id_actividad' SQL Injection

/ script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m At hotmail dot com,ushermehdi350 A...

Buffer overflow

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service crash and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large...

CVE-2007-4580

Buffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial of service crash and possibly execute arbitrary code by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a FsSetDirectoryInformation subcode containing a large...