105 matches found
CVE-2007-4947
The CVE-2007-4947 entry documents multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3. The vulnerability arises from inadequate validation of user-supplied input in the ptinclude parameter of /doc/admin/index.php (and related help*.php files), allowing an attacker to supply ...
CVE-2006-4947
Cross-site scripting XSS vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."...
CVE-2006-4947
CVE-2006-4947 is an XSS vulnerability in Drupal 4.7 Search Keywords module prior to version 1.15, identified on 2006/09/15. The issue arises from a lack of validation on output in the module, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected s...