CVE-2005-3859

PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter...

CVE-2005-3775

PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter...

CVE-2005-3775

PHP remote file inclusion vulnerability in pollvote.php in PollVote allows remote attackers to include arbitrary files via a URL in the pollname parameter...

CVE-2005-3304: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via 1 the username parameter in the Your Account page, 2 the url parameter in the Downloads module, and 3 the description parameter in the WebLinks module...

CVE-2005-2188: Undefined Security Weakness

McAfee IntruShield Security Management System obtains the user ID from the URL, which allows remote attackers to guess the Manager account and possibly gain privileges via a brute force attack...

CVE-2002-1852: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via 1 the URL or 2 a parameter to test2.pl...

CVE-2002-1702

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2002-1702: Undefined Security Weakness

Cross-site scripting vulnerability XSS in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter...

CVE-2005-1965

PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCALPATH parameter...

CVE-2005-1492: Undefined Security Weakness

Cross-site scripting XSS vulnerability in user.cgi in Gossamer Threads Links SQL 2.x and 3.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2004-1710

page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter...

CVE-2004-1630: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the login form in Open WorkFlow Engine OpenWFE 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter...

CVE-2005-0103: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0103

PHP remote file inclusion vulnerability in webmail.php in SquirrelMail before 1.4.4 allows remote attackers to execute arbitrary PHP code by modifying a URL parameter to reference a URL on a remote web server that contains the code...

CVE-2004-1710

page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter...

CVE-2004-0705

CVE-2004-0705 affects Bugzilla 2.16.x before 2.16.6 and Bugzilla 2.18 before 2.18rc1. The issue is multiple cross-site scripting (XSS) vulnerabilities in six CGI scripts (editcomponents.cgi, editgroups.cgi, editmilestones.cgi, editproducts.cgi, editusers.cgi, editversions.cgi) that allow remote a...

Choutcast buffer overflow

Buffer overflow on oversized icy-name and icy-url parameters...

mcNews 1.x - File Disclosure

source: https://www.securityfocus.com/bid/4770/info mcNews is a set of scripts for allowing users to post news stories on a webpage. It will run on most Linux and Unix variants as well as Microsoft Windows operating systems. mcNews does not sufficiently filter dot-dot-slash ../ sequences from URL...

Hosting Controller 1.x - DSNManager Directory Traversal

Hosting Controller 1.x - DSNManager Directory Traversal source: https://www.securityfocus.com/bid/4759/info Hosting Controller is an application which consolidates all hosting tasks into one interface. Hosting Controller runs on Microsoft Windows operating systems. The DSNManager script does not...

PVote 1.01.5 - Poll Content Manipulation

PVote 1.01.5 - Poll Content Manipulation source: https://www.securityfocus.com/bid/4540/info PVote is a web voting system written in PHP. It will run on most Unix and Linux variants as well as Microsoft Windows operating systems. It is possible for a remote attacker to add/delete web polls just b...