55 matches found
CVE-2011-4564
Cross-site scripting XSS vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action...
CVE-2011-4564: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the admin script in Active CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter in a module action...
CVE-2011-1034
Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...
CVE-2011-1034: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the UI in IBM Rational Build Forge 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the mod parameter to the fullcontrol program. NOTE: some of these details are obtained from third party information...
Directory traversal
Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...
CVE-2010-2096: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in CMSQlite 1.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...
CVE-2009-4382: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in module.php in PHPFABER CMS, possibly 1.3.36, allows remote attackers to inject arbitrary web script or HTML via the mod parameter...
Sahana 'mod' Parameter Local File Disclosure Vulnerability
Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further...
CVE-2009-3625: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in www/index.php in Sahana 0.6.2.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...
CVE-2008-6018: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in MyPHPSite, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the mod parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS aka Flatnuke3 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter to the default URI; 2 the foto parameter to photo.php in the 05Foto module; or 3 the name parameter in an insertrecord...
CVE-2008-5761: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in FlatnuX CMS aka Flatnuke3 2008-12-11 allow remote attackers to inject arbitrary web script or HTML via 1 the mod parameter to the default URI; 2 the foto parameter to photo.php in the 05Foto module; or 3 the name parameter in an insertrecord...
Phorum violation.php3转发任意邮件漏洞
BUGTRAQ: 2272 Phorum是一款基于PHP的WEB论坛程序，可使用在Linux和Unix操作系统下，也可使用在Microsoft Windows操作系统下。Phorum存在一个漏洞允许远程用户发送任意邮件，而且不需要任何验证。 violation.php3处理URL的参数，通过主机的MTA给Mod参数指定的email发送邮件，不过要记住的是，这封电子邮件会包含攻击者的IP（或代理服务器IP）和FQDN。恶意用户可能利用这个漏洞发送垃圾邮件或邮件炸弹等行径，可能让WEB主机的IP被加入垃圾邮件服务器的黑名单。 3.0.7 and Previous Brian Moon...
Directory traversal
Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...
CVE-2008-4486: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in index.php in SAC.php SACphp, as used in Yerba 6.3 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the mod parameter...
Sql injection
SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...
CVE-2008-4436: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...
CVE-2007-6290: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in js/getjs.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod and 2 js parameters...