44 matches found
CVE-2008-6726
CVE-2008-6726 describes multiple directory traversal vulnerabilities in CMScout 2.06. When register_globals is enabled, an attacker can abuse a .. path in the bit parameter to admin.php or index.php to include and execute arbitrary local files. The issue is distinct from CVE-2008-3415. The provid...
CVE-2007-6726
CVE-2007-6726 refers to multiple XSS vulnerabilities in Dojo 0.4.1 and 0.4.2 as used in Apache Struts and other products. The issues allow remote injection of arbitrary script/HTML via vectors involving xip_client.html and xip_server.html in src/io/. The NVD entry lists a MEDIUM severity (CVSSv2:...
CVE-2008-6726
creationtimestamp| type| source ---|---|--- 2008-12-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7625...
CVE-2006-6726
The CVE affects inertianews 0.02 beta, where inertianews_main.php contains a PHP remote file inclusion vulnerability. An attacker can pass a URL in the inews_path parameter to include and execute remote PHP code on the server, enabling arbitrary code execution and potential impact to confidential...