CVE-2007-6567: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in XZero Community Classifieds 4.95.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter in a page view action...

CVE-2007-5674

Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...

CVE-2007-5674: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in InstaGuide Weather aka Weather for PHP 1.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PageName parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

CVE-2007-5295

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

CVE-2007-5295

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

CVE-2007-5295: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in a Wikepage Opus 13 2007.2 and b TipiWiki 2 allow remote attackers to inject arbitrary web script or HTML via the 1 PageContent and 2 PageName parameters...

Directory traversal

Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter...

CVE-2007-4008: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary local files via a .. dot dot in the pagename parameter...

CVE-2007-0892: Improper Neutralization of CRLF Sequences

CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the url parameter, when the pagename parameter begins with "FILE:"...

CVE-2006-6520: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo parameter to a existepseudo.php, the 2 email parameter to b existeemail.php, or the 3 pageName or 4 cssform parameter to c Contact/contact.php...

CVE-2006-4834

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

PT-2006-5592 · Phpquiz · Phpquiz

Name of the Vulnerable Software and Affected Versions: phpQuiz version 0.01 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter in the index.php file. Recommendations: For phpQuiz version 0.01, consider restricting access to the pagenam...

CVE-2006-4834: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter...

phpQuiz 0.1 - pagename Remote File Inclusion

phpQuiz 0.1 - pagename Remote File Inclusion SolpotCrew Community phpQuiz v0.01 design and coding byJule Slootbeek pagename Remote File Inclusion Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip Bug Found By :Solpot a.k.a k. Hasibuan 14-09-2006 contact:...

phpQuiz 0.1 (pagename) Remote File Include Vulnerability

No description provided by source. SolpotCrew Community phpQuiz v0.01 design and coding byJule Slootbeek pagename Remote File Inclusion Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip Bug Found By :Solpot a.k.a k. Hasibuan 14-09-2006 contact: [email protected]...

phpQuizv0.01.txt

SolpotCrew Community phpQuiz v0.01 design and coding byJule Slootbeek pagename Remote File Inclusion Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip Bug Found By :Solpot a.k.a k. Hasibuan 14-09-2006 contact: [email protected] Website :...

phpQuiz 0.1 - 'pagename' Remote File Inclusion

SolpotCrew Community phpQuiz v0.01 design and coding byJule Slootbeek pagename Remote File Inclusion Download file : http://www.furor-normannicus.de/phpQuiz/download/phpQuiz.zip Bug Found By :Solpot a.k.a k. Hasibuan 14-09-2006 contact: [email protected] Website :...

CVE-2002-1070: Undefined Security Weakness

Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter...

CVE-2001-1023

CVE-2001-1023 affects Xcache 2.1. Remote attackers can disclose the server’s absolute paths by requesting a URL that Xcache has not cached; the product returns the full pathname in the Content-PageName header. The vulnerability is an information disclosure: partial confidentiality impact. Affecte...