Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22733/info Pagesetter is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Pagesetter 6.3.0 beta 5 and prior...

xtcommerce local file include

xtcommerce local file include local file include: /index.php?currency=EUR&manufacturersid=1&template=../../../../../../../../etc/passwd00 regards laurent gaffie...

ActiveCalendar 1.2.0, Multiple vulnerabilities

ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="scriptalertdocument.cookie/script In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.ph...

xtcommerce-lfi.txt

xtcommerce local file include local file include: /index.php?currency=EUR&manufacturersid=1&template=../../../../../../../../etc/passwd%00 regards laurent gaffié...

Pickle 0.3 - download.php Local File Inclusion

Pickle 0.3 - download.php Local File Inclusion source: https://www.securityfocus.com/bid/22703/info picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...

Active Calendar 1.2 - showcode.php Local File Inclusion

Active Calendar 1.2 - showcode.php Local File Inclusion source: https://www.securityfocus.com/bid/22704/info Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files...

Pickle 0.3 - 'download.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22703/info picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 0.3 is vulnerable to this...

plantilla.txt

Plantilla PHP Simple local file include vulnerability: /zadminxx/listmainpages.php?nfolder=/etc/ file upoad vulnerability: upload any-script with a double extension .. laurent gaffié...

Active Calendar 1.2 - 'showcode.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22704/info Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 1.2.0 is vulnerable;...

Simple one-file Gallery - gallery.php?f Cross-Site Scripting

Simple one-file Gallery - gallery.php?f Cross-Site Scripting source: https://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploit these...

Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access

Simple one-file Gallery - gallery.php?f Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploi...

XT:Commerce 3.04 - index.php Local File Inclusion

XT:Commerce 3.04 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/22698/info xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execu...

Simple one-file Gallery - 'gallery.php?f' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploit these issues to steal cookie-based authentication credentials and to...

LoveCMS 1.4 - id Cross-Site Scripting

LoveCMS 1.4 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacke...

Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access

Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues t...

Plantilla PHP Simple

Plantilla PHP Simple local file include vulnerability: /zadminxx/listmainpages.php?nfolder=/etc/ file upoad vulnerability: upload any-script with a double extension .. laurent gaffie...

LoveCMS 1.4 - 'id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...

LoveCMS 1.4 - 'load' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...

Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues to steal cookie-based authentication credentials, view...

phpmyvisites-xss.txt

Multiple vulnerabilities in phpMyVisites Application : phpMyVisites prior to 2.2 stable Release Date : 11 February 2007 Author : Nicob Abstract : ========== Several vulnerabilities were identified in phpMyVisites. This software is "a free and powerful open source GNU/GPL software for websites...