PHPMyBibli 1.32 - 'Init.Inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23599/info PHPMyBibli is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are als...

Phorum 5.1.20 - admin.php?module[] Full Path Disclosure

Phorum 5.1.20 - admin.php?module Full Path Disclosure source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting...

Lms 1.5.x - RTMessageAdd.php Remote File Inclusion

Lms 1.5.x - RTMessageAdd.php Remote File Inclusion source: https://www.securityfocus.com/bid/23611/info LMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and...

Claroline 1.x - RootSys Remote File Inclusion

source: https://www.securityfocus.com/bid/23609/info Claroline is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Claroline 1.x - RootSys Remote File Inclusion

Claroline 1.x - RootSys Remote File Inclusion source: https://www.securityfocus.com/bid/23609/info Claroline is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...

ACVSWS - 'Transport.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23603/info acvswsphp5 is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

LS simple guestbook (v1) Remote Code Execution Vulnerability

Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...

ShoutPro 1.5.2 - shout.php Remote Code Injection

ShoutPro 1.5.2 - shout.php Remote Code Injection ?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requirements $temppayload = "...

ls-exec.txt

Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input that it writes to the posts.txt file...

PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections

PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Wabbit Gallery Script 0.9 - 'showpic.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/23526/info Wabbit Gallery Script is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

Actionpoll 1.1 - Actionpoll.php Remote File Inclusion

Actionpoll 1.1 - Actionpoll.php Remote File Inclusion source: https://www.securityfocus.com/bid/23504/info Actionpoll is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the...

Actionpoll 1.1 - 'Actionpoll.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23504/info Actionpoll is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are als...

Flowers - Cas.php Cross-Site Scripting

Flowers - Cas.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23488/info FloweRS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

BloofoxCMS 0.2.2 - Img_Popup.php Cross-Site Scripting

BloofoxCMS 0.2.2 - ImgPopup.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23487/info BloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

ToendaCMS 1.5.3 - GET POST Forms HTML Injection

ToendaCMS 1.5.3 - GET POST Forms HTML Injection source: https://www.securityfocus.com/bid/23453/info ToendaCMS is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the...

TuMusika Evolution 1.6 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23452/info TuMusika Evolution is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

DotClear 1.2.x - toolsthememngindex.php?tool_url Cross-Site Scripting

DotClear 1.2.x - toolsthememngindex.php?toolurl Cross-Site Scripting source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

Cosign 2.0.1/2.9.4a - CGI Check Cookie Command Remote Authentication Bypass

source: https://www.securityfocus.com/bid/23422/info The 'cosign' application is prone to an authentication-bypass vulnerability because it fails to adequately sanitize user-supplied input. An attacker can exploit this issue to gain unauthorized access to services hosted on an affected computer...

DotClear 1.2.x - '/ecrire/trackback.php?post_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...