CVE-2007-2424: Undefined Security Weakness

PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...

CVE-2006-2535

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

Directory traversal

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

CVE-2006-2535: Exposure of Sensitive Information to an Unauthorized Actor

index.php in Destiney Links Script 2.1.2 allows remote attackers to obtain the installation path via an invalid show parameter referencing a non-existent file, which reveals the path in the resulting error message. NOTE: this issue might be resultant from a more serious issue such as directory...

Remote file inclusion

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue...

CVE-2006-2033

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue...

CVE-2006-2033: Undefined Security Weakness

PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue...

CVE-2006-1808: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the show parameter in a Template operation...

CVE-2006-1809: Undefined Security Weakness

index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...

CVE-2006-1750: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script or HTML via the 1 pic or 2 show parameters...

CVE-2006-0885: Undefined Security Weakness

Cross-site scripting XSS vulnerability in shownews.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2005-4500: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 show and 2 type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered...

CVE-2005-4403: Undefined Security Weakness

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2005-3878: Undefined Security Weakness

Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or include arbitrary files via a .. dot dot in the show parameter...

CVE-2005-3017: Undefined Security Weakness

PHP file inclusion vulnerability in index.php in Content2Web 1.0.1 allows remote attackers to include arbitrary files via the show parameter, which can lead to resultant errors such as path disclosure, SQL error messages, and cross-site scripting XSS...

CVE-2005-2690: Undefined Security Weakness

SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php...

CVE-2004-2019: Undefined Security Weakness

The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message...

CVE-2005-0617: Undefined Security Weakness

SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2004-1577: Undefined Security Weakness

index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message...

CVE-2004-1505: Undefined Security Weakness

Directory traversal vulnerability in index.php in Just Another Flat file JAF CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. dot dot in the show parameter...