143 matches found
CVE-2007-4283
PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery CPG 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter...
CVE-2006-4283
CVE-2006-4283 affects SOLMETRA SPAW Editor 1.0.6 and 1.0.7. The vulnerability is multiple PHP remote file inclusion via the spaw_dir parameter in dialogs/scripts for files including a.php, collorpicker.php, img.php, img_library.php, table.php, and td.php, allowing arbitrary PHP code execution. CV...
CVE-2005-4283
CVE-2005-4283 is an XSS vulnerability in The CITY Shop 1.3 and earlier. Remote attackers can inject arbitrary script/HTML via parameters to the search module (possibly store.cgi). The NVD entry assigns a CVSS v2 base score of 4.3 (Medium), with network attack vector, no authentication, and partia...