CVE-2006-0754

CVE-2006-0754 affects dotProject 2.0.1 and earlier. The issue allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, revealing the path in an error message. Related connected sources also describe multiple sc...

CVE-2006-0754

dotProject 2.0.1 and earlier allows remote attackers to obtain sensitive information via direct requests with an invalid baseDir to certain PHP scripts in the db directory, which reveal the path in an error message. NOTE: the vendor disputes this issue, saying that it could only occur if the...

OABoard 1.0 Forum - Remote File Inclusion

OABoard 1.0 Forum - Remote File Inclusion source: https://www.securityfocus.com/bid/16105/info The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution ...

OABoard 1.0 Forum - Remote File Inclusion

source: https://www.securityfocus.com/bid/16105/info The oaBoard application is prone to a remote file-include vulnerability. As a result, remote users may specify external PHP scripts to be included by the application. This could result in the execution of arbitrary PHP code in the context of th...

Zeroboard flaws

The remote web server contains several PHP scripts that are prone to arbitrary PHP code execution and cross-site scripting attacks. Description : The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this software is vulnerable to cross-site scripting and...

PhpGroupWare unspecified remote file include vulnerability

The remote host seems to be running PhpGroupWare, is a multi-user groupware suite written in PHP. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

BasiliX Message Content Script Injection Vulnerability

The remote web server contains PHP scripts that are prone to cross-site scripting attacks. Description : The remote host appears to be running a BasiliX version 1.1.0 or lower. Such versions are vulnerable to cross-scripting attacks since they do not filter HTML tags when showing a message. As a...

CubeCart < 3.0.4 Multiple Script XSS

The remote version of CubeCart contains several cross-site scripting vulnerabilities due to its failure to properly sanitize user-supplied input of certain variables to the 'index.php' and 'cart.php' scripts. %NASLMINLEVEL 70300 Josh Zlatin-Amishav This script is released under the GNU GPLv2...

Hosting Controller <= 6.1 Hotfix 2.3 Information Disclosure Vulnerabilities

According to its version number, the installation of Hosting Controller on the remote host may allow customers to use PHP scripts to gain access to files outside of their directory, including those belonging to other customers, resellers, or the system itself. %NASLMINLEVEL 70300 C Tenable Networ...

JaxXSS.txt

Jax PHP Scripts multiple vulnerabilities vendor url:http://www.jtr.de/scripting/php/ Advisory:http://lostmon.blogspot.com/2005/08/ jax-php-scripts-multiple.html vendor notify:yes exploit available:yes sumary: 0- Description. 1- Products affected. 2- Jax Guestbook report. 3- Jax Petitionbook repor...

Jax PHP Scripts 1.01.342.143.31 - sign_in.php?language Cross-Site Scripting

Jax PHP Scripts 1.01.342.143.31 - signin.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied...

Jax PHP Scripts 1.01.342.143.31 - jax_linklists.php Multiple Cross-Site Scripting Vulnerabilities

Jax PHP Scripts 1.01.342.143.31 - jaxlinklists.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly...

Jax PHP Scripts 1.01.342.143.31 - guestbook_ips2block Banned IP List Disclosure

Jax PHP Scripts 1.01.342.143.31 - guestbookips2block Banned IP List Disclosure source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-suppli...

Jax PHP Scripts 1.01.342.143.31 - ips2block Banned IP Disclosure

Jax PHP Scripts 1.01.342.143.31 - ips2block Banned IP Disclosure source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An...

Jax PHP Scripts 1.01.342.143.31 - formmailer.log User Sent Mail Disclosure

Jax PHP Scripts 1.01.342.143.31 - formmailer.log User Sent Mail Disclosure source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied...

Jax PHP Scripts 1.01.342.143.31 - shrimp_petition.php Multiple Cross-Site Scripting Vulnerabilities

Jax PHP Scripts 1.01.342.143.31 - shrimppetition.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly...

Jax PHP Scripts 1.01.342.143.31 - jax_newsletter.php?language Cross-Site Scripting

Jax PHP Scripts 1.01.342.143.31 - jaxnewsletter.php?language Cross-Site Scripting source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize...

Jax PHP Scripts 1.01.342.143.31 - logfile.csv User IP Disclosure

Jax PHP Scripts 1.01.342.143.31 - logfile.csv User IP Disclosure source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied input. An...

Jax PHP Scripts 1.01.342.143.31 - jax_guestbook.php Multiple Cross-Site Scripting Vulnerabilities

Jax PHP Scripts 1.01.342.143.31 - jaxguestbook.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly...

Jax PHP Scripts 1.01.342.143.31 petitionbook Script - User IP Disclosure

Jax PHP Scripts 1.01.342.143.31 petitionbook Script - User IP Disclosure source: https://www.securityfocus.com/bid/14482/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly sanitize user-supplied...