CVE-2022-1112: Improper Neutralization of Input During Web Page Generation

The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack...

AutoLinks 2.1 Pro Al_initialize.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14686/info AutoLinks Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrar...

Joomla! ZT Autolinks组件'controller'参数本地文件包含漏洞

Bugtraq ID:56994 Joomla!是一款开放源码的内容管理系统CMS。 Joomla! ZT Autolinks组件不正确过滤用户提交给'controller'参数的数据，允许攻击者利用漏洞通过目录遍历攻击获得系统文件内容。 0 Joomla! ZT Autolinks Component 厂商解决方案 目前没有详细解决方案提供： http://Joomla.org...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782

CVE-2005-2782 affects AutoLinks Pro 2.1 (AutoLinks Pro) via the PHP script al_initialize.php. The vulnerability is a remote file inclusion in the alpath parameter that accepts ftp:// URLs, bypassing a blacklist that only checked for http(s). This allows an attacker to cause arbitrary PHP code exe...

CVE-2005-2782

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

CVE-2005-2782: Undefined Security Weakness

PHP remote file inclusion vulnerability in alinitialize.php for AutoLinks Pro 2.1 allows remote attackers to execute arbitrary PHP code via an "ftp://" URL in the alpath parameter, which bypasses the incomplete blacklist that only checks for "http" and "https" URLs...

autolinks21.txt

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...

AutoLinks Pro 2.1

NewAngels Advisory 1 AutoLinks Pro 2.1 - Remote File Include Vulnerability ============================================================================= Software: AutoLinks Pro Version: 2.1 Type: Remote PHP File Include Vulnerability Risc: High Date: 16.08.05 Vendor: ScriptsCenter Page:...

Autolinks 2.1 Pro - Al_initialize.php Remote File Inclusion

Autolinks 2.1 Pro - Alinitialize.php Remote File Inclusion source: https://www.securityfocus.com/bid/14686/info AutoLinks Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

AutoLinks Pro 'al_initialize.php alpath Parameter Remote File Inclusion

The remote host is running AutoLinks Pro, a commercial link management package. The version of AutoLinks Pro installed on the remote host allows attackers to control the 'alpath' parameter used when including PHP code in the 'alinitialize.php' script. By leveraging this flaw, an unauthenticated...

Autolinks 2.1 Pro - 'Al_initialize.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/14686/info AutoLinks Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an...