CVE-2007-4368

The CVE-2007-4368 entry relates to IBM Rational ClearQuest Web 7.0.0.0-IFIX02 and 7.0.0.1, where an SQL injection vulnerability exists in /main via the username parameter in a GenerateMainFrame command. The issue allows remote attackers to execute arbitrary SQL commands and has a high impact (par...

CVE-2006-4368

PHP remote file inclusion vulnerability in includes/functionsportal.php in IntegraMOD Portal 2.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4368

CVE-2006-4368 concerns a PHP remote file inclusion in IntegraMOD Portal 2.x and earlier. The flaw resides in includes/functions_portal.php, where an attacker can supply a URL via the phpbb_root_path parameter to execute arbitrary PHP code on the remote server. Affected software is IntegraMOD Port...

CVE-2005-4368

CVE-2005-4368 affects Roundcube Webmail Alpha. When rcube_config['debug_level'] is set to 1 (default high verbose), an attacker can trigger an invalid_task to cause an error message that discloses the full application path. The available connected documents confirm the vulnerability description a...