43 matches found
CVE-2013-7102
CVE-2013-7102 concerns the WordPress theme OptimizePress up to version 1.61, where multiple unrestricted file upload vulnerabilities exist in lib/admin/media-upload.php, media-upload-lncthumb.php, and media-upload-sq_button.php. The root cause is insecure handling of uploaded files, enabling remo...
CVE-2008-7102
DotNetNuke 2.0–4.8.4 is affected by a skin-file security bypass vulnerability that lets remote attackers load .ascx files instead of skin files due to parameter-validation issues. Affected component: skin file handling; root cause: parameter validation weakness. Impact per sources: potential acce...
CVE-2006-7102
CVE-2006-7102 describes multiple PHP remote file inclusion vulnerabilities in the phpBurningPortal quiz-modul 1.0.1 (and possibly earlier) that allow remote attackers to execute arbitrary PHP code via a URL supplied to the lang_path parameter in one of three scripts: quest_delete.php, quest_edit....