165 matches found
CVE-2005-4878
CVE-2005-4878 details: Multiple XSS vulnerabilities in ACID 0.9.6b20 (acid_qry_main.php) and BASE 1.2 (base_qry_main.php), plus unspecified consoles, allow remote injection via the sig[1] parameter and related inputs. Connected documents also flag a separate but related issue CVE-2007-6156 affect...
CVE-2008-4878
The CVE-2008-4878 entry concerns WebCards 1.3, specifically the Add Image Macro feature. The vulnerability is an unrestricted file upload that enables remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension and then requesting the uploaded fi...
CVE-2006-4878
Directory traversal vulnerability in footer.php in David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. dot dot sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution ...
CVE-2006-4878
The CVE-2006-4878 issue affects PHPp (David Bennett PHP-Post) 1.0 and earlier, with a directory traversal vulnerability in footer.php. A remote attacker can read arbitrary local files by manipulating the template parameter to include a .. sequence. The note indicates exposure was later reported t...