CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

CVE-2010-2143

creationtimestamp| type| source ---|---|--- 2010-05-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12809...

FireStats < 1.6.2 Multiple Vulnerabilities

According to its version number, the install of FireStats running on the remote host is affected by multiple vulnerabilities : - A remote file include vulnerability in the 'fsjavascript' parameter of 'firestats-wordpress.php'. CVE-2009-2143 - An unspecified SQL injection vulnerability...

CVE-2009-2143

PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fsjavascript parameter...

CVE-2009-2143

CVE-2009-2143 affects the FireStats WordPress plugin prior to 1.6.2-stable. A remote file inclusion exists in the fs_javascript parameter of firestats-wordpress.php , allowing an attacker to execute arbitrary PHP code by supplying a URL. The vulnerability stems from insufficient input handling, e...

CVE-2008-2143

CVE-2008-2143 affects unspecified Microsoft Outlook Web Access (OWA) versions. The underlying issue is that OWA uses Cache-Control: no-cache instead of no-store, which may allow browsers following RFC-2616 to cache sensitive information. Impact is potential exposure of cached data; no exploitatio...

CVE-2007-2143

The CVE-2007-2143 entry concerns a PHP remote file inclusion in the Be2004-2 Joomla! template’s index.php, exploitable via a crafted mosConfig_absolute_path parameter to execute arbitrary PHP on affected servers. Connected documents reiterate this vulnerability description and indicate public ref...

CVE-2006-2143

CVE-2006-2143 describes multiple XSS vulnerabilities in TextFileBB 1.0.16. The issue allows remote attackers to inject arbitrary JavaScript/HTML via onmouseover-based events in the (1) color, (2) size, or (3) url bbcode tags. Affected software: TextFileBB 1.0.16. Root cause: lack of proper input ...

CVE-2002-2143

The CVE-2002-2143 issue affects MySimple News 1.0 where the admin.html page stores the administrative password in plaintext, enabling remote attackers to gain unauthorized access by viewing the page source. According to the sources, this exposes partial confidentiality, integrity, and availabilit...

CVE-2004-2143

SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier, exploitable via the filecatid parameter in the com_remository option. Root cause: improper handling of user-supplied input in that component. Impact: allows remote execution of arbitrary ...