44 matches found
CVE-2006-4672
Summary (CVE-2006-4672): A PHP remote file inclusion vulnerability exists in profitCode ppalCart 2.5 EE, potentially part of PayProCart. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) proMod parameter to index.php, or the (2) docroot parameter to index.php or mai...
7.5CVSS8AI score0.03259EPSS
SaveExploits2References7Affected Software1
CVE-2005-4672
The CVE-2005-4672 entry describes a cross-site scripting (XSS) flaw in CityPost Simple Image-Editor 0.52, specifically in image-editor-52/index.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML via one of five parameters: m1, m2, m3, imgsrc, or m4. The affected...
4.3CVSS6AI score0.01255EPSS
SaveExploits1References4Affected Software1
20