CVE-2006-1073

Summary: CVE-2006-1073 affects Simplog (Daverave Simplog) up to version 1.0.2. Affected component: index.php; vulnerable function is directory traversal via the act and blogid parameters, allowing remote attackers to include or read arbitrary .txt files. The core root cause is insufficient input ...

PT-2006-2101 · Simplog · Simplog

Name of the Vulnerable Software and Affected Versions: Simplog versions 1.0.2 and earlier Description: A directory traversal issue exists, allowing remote attackers to include or read arbitrary .txt files. This is achieved via the act and blogid parameters in the index.php file. Recommendations:...

CVE-2006-1013

PHP remote file include vulnerability in index.php in SMartBlog aka SMBlog 1.2 allows remote attackers to include and execute arbitrary PHP files via 1 the pg parameter and 2 a query string without a parameter...

CVE-2006-1013

PHP remote file include vulnerability in index.php in SMartBlog aka SMBlog 1.2 allows remote attackers to include and execute arbitrary PHP files via 1 the pg parameter and 2 a query string without a parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 dir and 2 pageid parameter to a index.php and 3 userid parameter to b mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injectio...

CVE-2006-1008

Multiple cross-site scripting XSS vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 dir and 2 pageid parameter to a index.php and 3 userid parameter to b mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injectio...

CVE-2006-1007

N8cms versions 1.1 and 1.2 are affected by multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the dir and page_id parameters to index.php. The issue is confirmed across multiple authoritative records (e.g., CVE-2006-1007/NVD) and is described ...

CVE-2006-0983

Cross-site scripting XSS vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter...

CVE-2006-0983

CVE-2006-0983 affects QwikiWiki version 1.4, specifically the index.php page, with a cross-site scripting (XSS) flaw exploitable via the page parameter. The underlying issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts indicate XSS risk, but no explicit remed...

CVE-2006-0969

The CVE-2006-0969 entry concerns a PHP remote file inclusion vulnerability in the page parameter of index.php within Top sites de PixelArtKingdom. The underlying issue is unsafely using the page parameter in an include/require operation, enabling remote attackers to cause arbitrary file inclusion...

CVE-2006-0970

CVE-2006-0970 is a PHP remote file inclusion vulnerability in index.php used by one or more ActiveCampaign products, potentially SupportTrio. The underlying issue is improper handling of the page parameter, allowing attackers to include and execute arbitrary files. The CVSS 2.0 base score is 7.5 ...

CVE-2006-0945

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL %00 in the index parameter...

CVE-2006-0943

SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php...

Information disclosure

U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password...

CVE-2006-0937

CVE-2006-0937 affects U.N.U. Mailgust 1.9. A direct HTTP request to index.php with method=showfullcsv allows a remote attacker to disclose POP3 server configuration, including account name and password. This is an information disclosure vulnerability due to improper access to configuration data. ...

CVE-2006-0899

The vulnerability CVE-2006-0899 affects 4Images

Directory traversal

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php...

CVE-2006-0880

Multiple cross-site scripting XSS vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 inf parameter; or, when registerglobals is enabled, the 2 upperTemplate and 3 lowerTemplate parameters...