1000 matches found
CVE-2007-6632
showCode.php in xml2owl 0.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the path parameter...
CVE-2007-6324: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
CVE-2007-5831: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote attackers to access arbitrary files via directory traversal sequences in the path parameter. NOTE: some of these details are obtained from third party information...
Directory traversal
Directory traversal vulnerability in index.php in the RSfiles component comrsfiles 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the path parameter in a files.display action...
CVE-2007-4504: Undefined Security Weakness
Directory traversal vulnerability in index.php in the RSfiles component comrsfiles 1.0.2 and earlier for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the path parameter in a files.display action...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...
CVE-2007-4264: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file aka snif 1.5.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 path and 2 download parameters...
CVE-2007-3056
Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2007-3056
Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2007-3056
Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2007-3056: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the path parameter...
CVE-2007-1362: Improper Input Validation
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via 1 a large cookie path parameter, which triggers memory consumption, or 2 an internal delimiter within cookie path or name values, which could trigg...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML via the 1 path parameter to view/search/; or the 2 companyname, 3 country, 4 email, 5 firstname, 6 middlename, 7 required, 8 surname, or 9 title parameter to...
CVE-2007-2663
PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the pathlocal parameter to 1 ftp.php, 2 libs/db.php, and 3 libs/ftp.php...
CVE-2007-2545: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the systempath parameter to 1 blocks/headerfile.php, 2 files/blocks/latestfiles.php, 3 filters/headerfile.php, 4 forums/blocks/latestposts.php, 5...
CVE-2007-2542: Undefined Security Weakness
PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...
PT-2007-3782 · Pixaria · Pixaria Gallery
Name of the Vulnerable Software and Affected Versions: Pixaria Gallery versions prior to 1.4.3 Description: The issue allows remote attackers to execute arbitrary PHP code. This is achieved via a URL in the cfgsysbase path parameter to scripts such as psg.smarty.lib.php and certain include and...