Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

PHP-Stats 0.1.9.1b - 'PHP-stats-options.php' Command Execution

126 $result.=" ."; else $result.=" ".$s...

CVE-2006-5986

admin/options.php in Extreme CMS 0.9, and possibly earlier, does not require authentication, which might allow remote attackers to conduct unauthorized activities. NOTE: this issue can be combined with another vulnerability to expand the scope of a cross-site scripting XSS attack without...

CVE-2006-5985

Extreme CMS 0.9 is affected by multiple XSS vulnerabilities in admin/options.php, exploitable via the parameters bg1, bg2, text, or size. The issue is documented with a CVSS v2 base score of 6.8 (MEDIUM) and indicates remote attackers can inject script/HTML; no exploit details or patches are prov...

CVE-2002-1131

Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via 1 addressbook.php, 2 options.php, 3 search.php, or 4 help.php...