376 matches found
CVE-2008-6083
Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...
PHPAuctionSystem - Multiple Remote File Inclusions
PHPAuctionSystem - Multiple Remote File Inclusions »=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o...
PHPAuctionSystem - Multiple Remote File Inclusions
»=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » =======...
DEBIAN-CVE-2008-5587
Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 and earlier, when registerglobals is enabled, allows remote attackers to read arbitrary files via a .. dot dot in the language parameter to index.php...
PunBB language Paramater Local File Include Vulnerability
The remote web server contains a PHP script that is affected by a local file include issue. Description: The version of PunBB installed on the remote host fails to sanitize input to the 'language' parameter before storing it in the 'register.php' script as a user's preferred language setting. By...
Directory traversal
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...
CVE-2008-3371
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...
CVE-2008-3371
CVE-2008-3371 - Vulnerability in TalkBack 2.3.5 and earlier than 2.3.6.2 where the installer’s language parameter in install/help.php can be manipulated to perform directory traversal, allowing remote inclusion and execution of local files. The issue is a classic local file inclusion due to impro...
CVE-2008-2985
Directory traversal vulnerability in loadlanguage.php in CMReams CMS 1.3.1.1 Beta 2, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the pagelanguage parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...
CVE-2008-2975
Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...
ProManager 0.73 (config.php) Local File Inclusion Vulnerability
No description provided by source. -------------------------------------- Pro Manager 0.73 Local File Inclusion Vuln -------------------------------------- http://www.sfr-fresh.com/unix/privat/proManager-0.73.tar.gz -------------------------------------- By : Stack email : Wanted...
CVE-2008-2527
Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...
Cross site scripting
Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...
CVE-2008-2527
Cross-site scripting XSS vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...
Directory traversal
Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...
CVE-2008-1908
Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...
CVE-2008-1908
Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...