Mailtraq 2.2 - 'Browse.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/7813/info Mailtraq is vulnerable to cross-site scripting attacks. The vulnerability exists due to insufficient sanitization of HTTP requests to the vulnerable Mailtraq server. An attacker can exploit this vulnerability by manipulating the 'cfolder' URI...

Invision Board 1.1.1 - functions.php SQL Injection

Invision Board 1.1.1 - functions.php SQL Injection source: https://www.securityfocus.com/bid/7290/info An input validation error has been reported in Invision Board which may result in the manipulation of SQL queries. This vulnerability exists in the functions.php script file. An attacker may be...

PostNuke 0.72x Members_List Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7218/info Multiple path disclosure vulnerabilities have been reported in various PHP scripts used by PHP-Nuke. The issue occurs when an invalid URI parameter is passed to certain scripts. The affected scripts do not provide sufficient error handling for...

VPOPMail 0.9x - vpopmail.php Remote Command Execution

VPOPMail 0.9x - vpopmail.php Remote Command Execution source: https://www.securityfocus.com/bid/7063/info A vulnerability has been reported for VPOPMail that may allow attackers to execute arbitrary commands on a vulnerable system. The vulnerability exists due to insufficient sanitization of...

GTCatalog 0.8.160.9 - Remote File Inclusion

GTCatalog 0.8.160.9 - Remote File Inclusion source: https://www.securityfocus.com/bid/6998/info GTCatalog is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remot...

WihPhoto 0.86 dev - sendphoto.php File Disclosure

WihPhoto 0.86 dev - sendphoto.php File Disclosure source: https://www.securityfocus.com/bid/6929/info A vulnerability has been reported for WihPhoto that may result in the disclosure of files to remote attackers. The vulnerability exists due to inadequate verification of some URI parameters in th...

D-Forum 1 - 'header' Remote File Inclusion

source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some circumstances, it is possible for remote...

D-Forum 1 - 'footer' Remote File Inclusion

source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some circumstances, it is possible for remote...

PHP-Nuke 6.0 - 'modules.php' Denial of Service

source: https://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacker can exploit this vulnerability b...

CHETCPASSWD 1.12 - Shadow File Disclosure

source: https://www.securityfocus.com/bid/6472/info CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker. It is possible to exploit this issue by sending an overly long string as a value for the 'user' URI...

CHETCPASSWD 1.12 - Shadow File Disclosure

CHETCPASSWD 1.12 - Shadow File Disclosure source: https://www.securityfocus.com/bid/6472/info CHETCPASSWD is prone to a vulnerability that may potentially cause the tail end of the local shadow file to be disclosed to a remote attacker. It is possible to exploit this issue by sending an overly lo...