Bloq 0.5.4 - filesmainfile.php?page[path] Remote File Inclusion

Bloq 0.5.4 - filesmainfile.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Bloq 0.5.4 - 'rss2.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

PHP TopSites FREE 1.022b - config.php Remote File Inclusion

PHP TopSites FREE 1.022b - config.php Remote File Inclusion source: https://www.securityfocus.com/bid/20486/info PHP TopSites is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PH...

MamboLaiThai ExtCalThai 0.9.1 - mail.inc.php?CONFIG_EXT[LIB_DIR] Remote File Inclusion

MamboLaiThai ExtCalThai 0.9.1 - mail.inc.php?CONFIGEXTLIBDIR Remote File Inclusion source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may all...

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion source: https://www.securityfocus.com/bid/20450/info BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

phpWebSite 0.10.2 - PHPWS_SOURCE_DIR Multiple Remote File Inclusions

phpWebSite 0.10.2 - PHPWSSOURCEDIR Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20412/info phpWebSite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker...

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection source: https://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access o...

WikyBlog 1.2.x - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20350/info WikyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

HAMweather 3.9.8 - 'template.php' Script Code Injection

source: https://www.securityfocus.com/bid/20311/info HAMweather is prone to a script-code-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are al...

Buzlas 2006-1 Full - Archive_Topic.php Remote File Inclusion

Buzlas 2006-1 Full - ArchiveTopic.php Remote File Inclusion source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Les Visiteurs 2.0 - Multiple Remote File Inclusions

Les Visiteurs 2.0 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/20259/info Les Visiteurs is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

Les Visiteurs 2.0 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/20259/info Les Visiteurs is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

vBulletin 2.3.x - global.php SQL Injection

vBulletin 2.3.x - global.php SQL Injection source: https://www.securityfocus.com/bid/20214/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CubeCart 3.0.x - view_order.php?order_id SQL Injection

CubeCart 3.0.x - vieworder.php?orderid SQL Injection source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly...

CubeCart 3.0.x - '/admin/nav.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

CubeCart 3.0.x - '/admin/print_order.php?order_id' SQL Injection

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

CubeCart 3.0.x - 'view_doc.php?view_doc' SQL Injection

source: https://www.securityfocus.com/bid/20215/info CubeCart is prone to multiple input-validation vulnerabilities, including information-disclosure, cross-site scripting, and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of...

Exporia 0.3 - 'Common.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20205/info Exporia is prone to a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...

RedBLoG 0.5 - adminindex.php?root_path Remote File Inclusion

RedBLoG 0.5 - adminindex.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/20115/info The redblog application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...