CVE-2009-4422

Multiple cross-site scripting XSS vulnerabilities in the GetURLArguments function in jpgraph.php in Aditus Consulting JpGraph 3.0.6 allow remote attackers to inject arbitrary web script or HTML via a key to csiminhtmlex1.php, and other unspecified vectors...

CVE-2009-4422

CVE-2009-4422 corresponds to multiple cross-site scripting (XSS) vulnerabilities in Aditus Consulting JpGraph 3.0.6, specifically in the GetURLArguments function inside jpgraph.php. The public description indicates remote attackers can inject arbitrary web script or HTML via a key to csim_in_html...

XSS Vulnerability in JpGraph 3.0.6

No description provided by source. XSS Vulnerability in JpGraph 3.0.6 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- JpGraph is an object oriented library for PHP that can be used to create various types of graphs which also contai...

XSS Vulnerability in JpGraph 3.0.6

XSS Vulnerability in JpGraph 3.0.6 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- JpGraph is an object oriented library for PHP that can be used to create various types of graphs which also contains support for client side image...

jpgraph2 -- XSS vulnerability

Martin Barbella reports: JpGraph is an object oriented library for PHP that can be used to create various types of graphs which also contains support for client side image maps. The GetURLArguments function for the JpGraph's Graph class does not properly sanitize the names of get and post...

JpGraph 3.0.6 Cross Site Scripting

XSS Vulnerability in JpGraph 3.0.6 Discovered by Martin Barbella Description of Vulnerability: ----------------------------- JpGraph is an object oriented library for PHP that can be used to create various types of graphs which also contains support for client side image maps. The GetURLArguments...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...

CVE-2008-5694

CVE-2008-5694 describes a PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php within Sandbox 1.4.1 (and possibly Aditus JpGraph). An attacker could cause arbitrary PHP code execution via unspecified vectors. The vulnerable component is the JPGraph-related error handl...

PT-2008-6746 · Php · Php

Name of the Vulnerable Software and Affected Versions: Sandbox version 1.4.1 Description: A remote file inclusion issue in lib/jpgraph/jpgraph errhandler.inc.php might allow remote attackers to execute arbitrary PHP code. The issue may be located in Aditus JpGraph rather than Sandbox...

phpPrintAnalyzer.txt

--------------------------------------------------------------------------------------- phpPrintAnalyzer 1.1 repparrapportracine Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/27 Location : Iran - Tehran...

phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability

--------------------------------------------------------------------------------------- phpPrintAnalyzer 1.1 repparrapportracine Remote File Inclusion --------------------------------------------------------------------------------------- Author : Sh3ll Date : 2006/04/27 Location : Iran - Tehran...

[Mantis Advisory/2002-04] Arbitrary code execution vulnerability in Mantis

Mantis Advisory/2002-04 Arbitrary code execution vulnerability in Mantis 0. Table of Contents 1. Introduction 2. Summary / Impact analysis 3. Affected versions 4. Workaround / Solution 5. Detailed explanation 6. Credit 7. Contact details 1. Introduction Mantis is an Open Source web-based...