CVE-2008-5734

IceWarp Merak Mail Server Web Mail (IceWarp Merak Mail Server 9.3.2) is affected by CVE-2008-5734: an XSS flaw where an IMG tag in HTML emails is not sanitized, allowing a remote attacker to inject arbitrary script/HTML into a user’s browser. Root cause: improper sanitization of IMG HTML tag inpu...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 langpath parameter to thirdparty/phpmailer/class.phpmailer.php or the 2 getpluginfilepath parameter to...

CVE-2006-5734

The CVE-2006-5734 entry describes multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2, exploitable via untrusted URLs passed to specific parameters (1) section in documentation/common/frame_toc.php and documentation/common/search.php; (2) req_lang in documentation/common/search.p...