ListMessenger 0.9.3 - 'LM_Path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19014/info ListMessenger is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicio...

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities

ATutor 1.5.3 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18898/info ATutor is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied...

Invision Power Board (IP.Board) 1.x2.x - Multiple SQL Injections

Invision Power Board IP.Board 1.x2.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/18836/info Invision Power Board is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied data before using it...

Glossaire 1.7 - Remote File Inclusion

Glossaire 1.7 - Remote File Inclusion source: https://www.securityfocus.com/bid/18792/info Glossaire is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary...

newsPHP 2006 PRO - incrss_feed.php?category SQL Injection

newsPHP 2006 PRO - incrssfeed.php?category SQL Injection source: https://www.securityfocus.com/bid/18726/info NewsPHP 2006 PRO is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the...

CrisoftRicette 1.0 - Cookbook.php Remote File Inclusion

CrisoftRicette 1.0 - Cookbook.php Remote File Inclusion source: https://www.securityfocus.com/bid/18674/info CrisoftRicette is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this iss...

eNpaper1 - 'Root_Header.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18649/info eNpaper1 is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file containing malicious script code execute...

Vincent-Leclercq News 5.2 - Diver.php SQL Injection

Vincent-Leclercq News 5.2 - Diver.php SQL Injection source: https://www.securityfocus.com/bid/18729/info Vincent-Leclercq News is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. An...

SoftBizScripts Dating Script 1.0 - news_desc.php SQL Injection

SoftBizScripts Dating Script 1.0 - newsdesc.php SQL Injection source: https://www.securityfocus.com/bid/18605/info Softbiz Dating Script is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A...

PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote file containing malicio...

V3 Chat Instant Messenger - '/mail/reply.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

V3 Chat Instant Messenger - 'profileview.php?membername' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18543/info V3 Chat Instant Messenger is prone to multiple cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...

SaphpLesson 1.12.03.0 - Multiple SQL Injections

SaphpLesson 1.12.03.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/18501/info The saphplesson module is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...

RahnemaCo - 'page.php' PageID Remote File Inclusion

source: https://www.securityfocus.com/bid/18490/info RahnemaCo is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker ...

mcGuestbook 1.3 - 'admin.php?lang' Remote File Inclusion

source: https://www.securityfocus.com/bid/18476/info mcGuestbook is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code an...

Indexu 5.0.1 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18477/info Indexu is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing...

Bee-hive 1.2 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18654/info Bee-hive is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote file containing malicious script...

Simpnews 2.x - 'Wap_short_news.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18410/info Simpnews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

NPDS 5.10 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18383/info NPDS is prone to multiple input-validation issues, including information-disclosure and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A successful exploit of...

Adaptive Website Framework 1.11 - Remote File Inclusion

source: https://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...