128 matches found
CVE-2008-2913
Concretely, CVE-2008-2913 affects Devalcms 1.4a and its func.php, where directory traversal is possible when magic_quotes_gpc is disabled. An attacker can use a .. in the currentpath parameter together with certain .../..... sequences in the currentfile parameter to trigger index.php and include/...
CVE-2008-2913
creationtimestamp| type| source ---|---|--- 2008-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5822...
CVE-2007-2913
CVE-2007-2913: Cross-site scripting in ClonusWiki 0.5 (index.php) allows remote injection of arbitrary script/HTML via the query parameter. Exploitation/impact details beyond this are not specified in the provided documents; no remediation or patch/version information is given.
CVE-2007-2913
Cross-site scripting XSS vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
secunia-SelectaPix.txt
====================================================================== Secunia Research 09/06/2006 - SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...
CVE-2006-2913
CVE-2006-2913 describes a cross-site scripting (XSS) vulnerability in SelectaPix 1.31, exploitable via the albumID parameter to popup.php and view_album.php. The issue allows remote attackers to inject arbitrary web script or HTML. Documents confirm the affected component and vulnerable endpoints...
