264 matches found
CVE-2006-4372
The CVE-2006-4372 vulnerability affects the Mambo CMS (Lurm Constructor component com_lurm_constructor) version 0.6b and earlier. It allows remote attackers to execute arbitrary PHP code by supplying a URL in the lm_absolute_path parameter, via a PHP remote file inclusion vulnerability. Public re...
CVE-2005-4372
Cross-site scripting XSS vulnerability in account.html in Adaptive Website Framework AWF 2.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2005-4372
The CVE-2005-4372 entry describes a Cross-site scripting (XSS) vulnerability in Adaptive Website Framework (AWF) prior to or including version 2.10, exploitable via the page parameter in account.html. The underlying issue is improper handling of the page value, allowing remote attackers to inject...
