105 matches found
CVE-2004-2736
Polar HelpDesk 3.0 is affected by an authentication bypass vulnerability where an attacker can bypass login by manipulating the UserId and UserType cookie. The issue allows remote access without valid credentials and, per the Nessus entry, may enable administrative rights on the remote system. Th...
CVE-2007-2736
Achievo 1.1.0 is affected by a PHP remote file inclusion vulnerability in index.php via the config_atkroot parameter, allowing an attacker to execute arbitrary PHP code. The issue is documented in CVE-2007-2736 and is classified with high impact. The connected sources confirm the vulnerability de...
CVE-2006-2736
CVE-2006-2736 is a PHP remote file inclusion vulnerability affecting Blend Portal 1.2.0 when used with phpBB with register_globals enabled. The flaw resides in blend_data/blend_common.php and allows code execution via a URL in the phpbb_root_path parameter. This entry is corroborated across multi...
CVE-2005-2736
CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...
