Cyberfolio 2.0 RC1 - 'av' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV58$2006 ----------------------------------------------------------------------------------------------- ECHOADV58$2006Cyberfolio =2.0 RC1 $av Remote File Inclusion Vulnerability...

ac4p Mobile - 'polls.php' Multiple Cross-Site Scripting Vulnerabilities (1)

source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

Advanced Guestbook 2.3.1 - admin.php Remote File Inclusion

Advanced Guestbook 2.3.1 - admin.php Remote File Inclusion source: https://www.securityfocus.com/bid/20902/info Advanced GuestBook for phpBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue t...

ac4p Mobile - 'send.php?cats' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

FreeWebShop 2.2 - index.php SQL Injection

FreeWebShop 2.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/20887/info FreeWebShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...

RSSonate - Project_Root Remote File Inclusion

RSSonate - ProjectRoot Remote File Inclusion source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and th...

RSSonate - 'Project_Root' Remote File Inclusion

source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Netquery 4.0 - NQUser.php Cross-Site Scripting

Netquery 4.0 - NQUser.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20837/info Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Netquery 4.0 - 'NQUser.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20837/info Netquery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...

IG Shop 1.4 - Change_Pass.php Cross-Site Scripting

IG Shop 1.4 - ChangePass.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20768/info iG Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

Actionpoll 1.1.1 - '/db/PollDB.php?CONFIG_DATAREADERWRITER' Remote File Inclusion

source: https://www.securityfocus.com/bid/20788/info Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

TextPattern <=1.19 Remote File Inclusion Vulnerability

---------------------------------------------------------------------------- TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerability ---------------------------------------------------------------------------- Author : Zeni Susanto A.K.A Bithedz Date Found : October, 25th 2006 Locatio...

Actionpoll 1.1.1 - dbDataReaderWriter.php?CONFIG_DB Remote File Inclusion

Actionpoll 1.1.1 - dbDataReaderWriter.php?CONFIGDB Remote File Inclusion source: https://www.securityfocus.com/bid/20788/info Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

The Search Engine Project 0.942 - 'Configfunction.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

IG Shop 1.4 - 'Change_Pass.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20768/info iG Shop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in...

PLS-Bannieres 1.21 - Bannieres.php Remote File Inclusion

PLS-Bannieres 1.21 - Bannieres.php Remote File Inclusion source: https://www.securityfocus.com/bid/20772/info PLS-Bannieres is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...

ASPPlayGround.NET Forum 2.4.5 - Calendar.asp Cross-Site Scripting

ASPPlayGround.NET Forum 2.4.5 - Calendar.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/20335/info ASPPlayground.NET Forum Advanced Edition is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

PHPTreeView 1.0 - TreeViewClass.php Remote File Inclusion

PHPTreeView 1.0 - TreeViewClass.php Remote File Inclusion source: https://www.securityfocus.com/bid/20764/info PHPTreeview is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

ASPPlayGround.NET Forum 2.4.5 - 'Calendar.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20335/info ASPPlayground.NET Forum Advanced Edition is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of...