WordPress myLDlinker Plugin - SQL Injection Vulnerability

This myLDlinker plugin is prone to an SQL injection vulnerability. It allows remote attackers to execute arbitrary SQL commands via the URL parameter. Solution Update the plugin...

Mozilla Thunderbird < 3.0.6 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.6. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - The array class used to store CS...

CVE-2009-4928

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055...

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the 1 cooklan cookie parameter $landir variable or possibly 2 Sdbtype parameter. NOTE: this was originally reported as remote file...

CVE-2010-2341

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

CVE-2010-2315

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...

CVE-2010-2289

Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 Build 14599 and 6.5R2 Build 14951 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfgadminpath parameter to 1 index.php, 2 view.php, 3 image.php, 4 search.php, 5 admin/index.php, 6 admin/gallery/index.php, 7 admin/gallery/view.php, 8...

Remote file inclusion

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter...

CVE-2010-1921

Multiple PHP remote file inclusion vulnerabilities in OpenMairie openAnnuaire 2.00, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 annuaire.class.php, 2 droit.class.php, 3 collectivite.class.php, 4 profil.class.php, 5...

Jaws 0.8.12 Cross Site Scripting

Vulnerability ID: HTB22357 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinjaws.html Product: Jaws Vendor: Jaws Project Vulnerable Version: 0.8.12 and Probably Prior Versions Vendor Notification: 23 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

Remote file inclusion

PHP remote file inclusion vulnerability in core/includes/gfwsmarty.php in Gallo 0.1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the configgfwroot parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in NukeHall 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter to 1 blocks.php, 2 messages.php, and 3 stories.php in admin/modules/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 wp-comments-post.php and 2 wp-trackback.php...

runportleterror.jsp contains XSS hole

The runportleterror.jsp contains an XSS attach vector via the unescaped 'portletKey' URL parameter. The parameter should be escaped properly...

runportleterror.jsp contains XSS hole

The runportleterror.jsp contains an XSS attach vector via the unescaped 'portletKey' URL parameter. The parameter should be escaped properly...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Insky CMS 006-0111, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter to 1 city.get/city.get.php, 2 city.get/index.php, 3 message2.send/message.send.php, 4...