CVE-2007-3120: Undefined Security Weakness

Cross-site scripting XSS vulnerability in public/code/cpdpage.php in All In One Control Panel AIOCP before 1.3.017 allows remote attackers to inject arbitrary web script or HTML via the aiocpdp parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-2624: Undefined Security Weakness

Dynamic variable evaluation vulnerability in shared/config/cpconfig.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to conduct cross-site scripting XSS and possibly other attacks via the SERVER superglobal array. NOTE: some of these details are obtained from third par...

CVE-2007-2625: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shared/code/cpauthorization.php in All In One Control Panel AIOCP before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: some of these details are obtained from third party information...

CVE-2007-0365: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.009 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably a different vulnerability than CVE-2006-5830...

CVE-2007-0316: Undefined Security Weakness

Multiple SQL injection vulnerabilities in All In One Control Panel AIOCP 1.3.010 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 xusername parameter to shared/code/cpauthorization.php, and the 2 did parameter to...

Sql injection

SQL injection vulnerability in shared/code/cpfunctionsdownloads.php in Nicola Asuni All In One Control Panel AIOCP before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the downloadcategory parameter...

CVE-2007-0223: Undefined Security Weakness

SQL injection vulnerability in shared/code/cpfunctionsdownloads.php in Nicola Asuni All In One Control Panel AIOCP before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the downloadcategory parameter...

CVE-2006-5830

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...

CVE-2006-5831

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2006-5832

All In One Control Panel (AIOCP)

CVE-2006-5831

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

CVE-2006-5832

All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...

CVE-2006-5830

CVE-2006-5830 details multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier. The issue arises from unsanitized input in several parameters and fields, including: (1) topid, (2) forid, (3) catid to code/cp_forum_view.php; (4) choosed_language t...

CVE-2006-5830: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...

CVE-2006-5832: Undefined Security Weakness

All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...

CVE-2006-5829: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 choosedlanguage parameter to a cpdpage.php, b cpnews.php, c cpforumview.php, d cpedituser.php, e cpnewsletter.php, f cplinks.php, g...

CVE-2006-5831: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...