CVE-2008-2485

Cross-site scripting XSS vulnerability in the URL redirection script inc/urlredirection.inc.php in PCPIN Chat before 6.11 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Immunity Canvas: WPFLASH_INCLUDE

Name| wpflashinclude ---|--- CVE| CVE-2007-2485 Exploit Pack| CANVAS Description| Wordpress plugin myflash Remote File Inclusion Notes| CVE Name: CVE-2007-2485 VENDOR: WordPress Repeatability: Infinite References: http://www.frsirt.com/english/advisories/2007/1616 CVE Url:...

CVE-2007-2485

The CVE-2007-2485 entry concerns a PHP Remote File Inclusion in the WordPress plugin myflash (myflash-button.php) versions 1.00 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the wpPATH parameter, enabling code execution on the affected ...

CVE-2006-2485

CVE-2006-2485 refers to a PHP remote file inclusion vulnerability in Quezza, affecting 1.0 and earlier (possibly 1.1.0). The flaw is in includes/class_template.php where an attacker can supply a URL via the quezza_root_path parameter to execute arbitrary PHP code on the affected server. The conne...

CVE-2004-2485

CVE-2004-2485 affects PHP Live! prior to 2.8.2. It describes an unspecified vulnerability that allows remote attackers to include arbitrary files and directories via unspecified attack vectors, with potential arbitrary PHP code execution as implied by related Nessus text. The vulnerability detail...

CVE-2005-2485

CVE-2005-2485 concerns a cross-site scripting (XSS) vulnerability in the Helpdesk component of Logicampus prior to version 1.1.1. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Affected software: Logicampus Helpdesk (before 1.1.1). Underlying...

CVE-2004-2485

Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors...

PHP Live! directory/conf File Include Unspecified Issue

The remote host is running PHP Live! a live support system for websites. The remote version of this software contains an unspecified flaw that could allow an attacker to include a configuration file hosted on a third-party server. An attacker may exploit this flaw to execute arbitrary PHP code on...