iDevSpot iSupport 1.8 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/26961/info iSupport is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. This issue affects iSupport 1.8;...

CVE-2007-4231

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...

Remote file inclusion

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...

CVE-2007-4231

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...

CVE-2007-4231

CVE-2007-4231 describes a PHP remote file inclusion in the IDevSpot PhpHostBot line (1.06 and earlier). The vulnerability is triggered in order/login.php via a URL parameter (svr_rootscript), allowing an attacker to execute arbitrary PHP code on affected installations. The entry notes this as a d...

CVE-2007-4231: Undefined Security Weakness

PHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the svrrootscript parameter, a different vector than CVE-2007-4094 and CVE-2006-3776...

Remote file inclusion

PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the loginform parameter, a different vector than CVE-2006-3776...

CVE-2007-4094

PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the loginform parameter, a different vector than CVE-2006-3776...

CVE-2007-4094: Undefined Security Weakness

PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the loginform parameter, a different vector than CVE-2006-3776...

CVE-2006-4895

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php...

CVE-2006-4894

CVE-2006-4894 is an XSS vulnerability in iDevSpot NixieAffiliate (versions 1.9 and earlier), where an attacker can inject arbitrary script via the error parameter in forms/lostpassword.php. The CVE indicates a network-vector, with no authentication required and partial integrity impact. Affected:...

CVE-2006-4895

The CVE-2006-4895 issue affects IDevSpot NexieAffiliate 1.9 and earlier. Affected component/entry point is delete.php, where a modified id parameter enables remote attackers to delete arbitrary affiliates. This describes an input manipulation vulnerability that permits unauthorized modification/d...

CVE-2006-4895

IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php...

CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

CVE-2006-4884

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via 1 the suser parameter in support/rightbar.php, 2 the ticketid parameter in support/opentickets.php, and 3 the conspagetitle parameter in index.php. NOTE: th...

CVE-2006-4883

CVE-2006-4883 covers multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory. The issues allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php and (2) the message parameter in status.php. The NVD entry lists a base score of...

CVE-2006-4883

Multiple cross-site scripting XSS vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via 1 the stylesheet parameter in Feed.php or 2 the message parameter in status.php...

CVE-2006-4884

CVE-2006-4884 concerns multiple XSS vulnerabilities in IDevSpot iSupport 1.8. The issue enables remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title paramet...

CVE-2006-4884

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via 1 the suser parameter in support/rightbar.php, 2 the ticketid parameter in support/opentickets.php, and 3 the conspagetitle parameter in index.php. NOTE: th...

CVE-2006-4894: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter...