MiraksGalerie 2.62 - galimage.lib.php?listconfigfile[0] Remote File Inclusion

MiraksGalerie 2.62 - galimage.lib.php?listconfigfile0 Remote File Inclusion source: https://www.securityfocus.com/bid/18313/info MiraksGalerie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

MiraksGalerie 2.62 - galsecurity.lib.php?listconfigfile[0] Remote File Inclusion

MiraksGalerie 2.62 - galsecurity.lib.php?listconfigfile0 Remote File Inclusion source: https://www.securityfocus.com/bid/18313/info MiraksGalerie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

Open Business Management 1.0.3 pl1 - 'list_index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18348/info Open Business Management is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize HTML and script code from user-supplied input to several parameters before returning to the user. An attacker could exploit...

GANTTy 1.0.3 - index.php Cross-Site Scripting

GANTTy 1.0.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18296/info GANTTy is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

GANTTy 1.0.3 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18296/info GANTTy is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

Alex DownloadEngine 1.4.1 - comments.php SQL Injection

Alex DownloadEngine 1.4.1 - comments.php SQL Injection source: https://www.securityfocus.com/bid/18293/info DownloadEngine is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

CoolForum 0.x - editpost.php SQL Injection

CoolForum 0.x - editpost.php SQL Injection source: https://www.securityfocus.com/bid/18268/info CoolForum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Kmita FAQ 1.0 - search.php?q Cross-Site Scripting

Kmita FAQ 1.0 - search.php?q Cross-Site Scripting source: https://www.securityfocus.com/bid/18282/info Kmita FAQ is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application t...

Bookmark4U 2.0 - '/inc/dbase.php?env[include_prefix]' Remote File Inclusion

source: https://www.securityfocus.com/bid/18281/info Bookmark4U is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containin...

Alex DownloadEngine 1.4.1 - 'comments.php' SQL Injection

source: https://www.securityfocus.com/bid/18293/info DownloadEngine is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise th...

dotWidget for articles 2.0 - '/admin/categories.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

dotWidget for articles 2.0 - '/admin/index.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

dotWidget for articles 2.0 - 'showcatpicks.php?file_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

dotWidget for articles 2.0 - adminindex.php Multiple Remote File Inclusions

dotWidget for articles 2.0 - adminindex.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

dotWidget for articles 2.0 - admincategories.php Multiple Remote File Inclusions

dotWidget for articles 2.0 - admincategories.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize...

dotWidget for articles 2.0 - '/admin/articles.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

phpBB 2.0.x - template.php Remote File Inclusion

phpBB 2.0.x - template.php Remote File Inclusion source: https://www.securityfocus.com/bid/18255/info The phpBB application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this iss...

Enigma Haber 4.2 - Cross-Site Scripting

Enigma Haber 4.2 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18226/info Enigma Haber is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Squirrelmail 1.4.x - 'Redirect.php' Local File Inclusion

source: https://www.securityfocus.com/bid/18231/info SquirrelMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow unauthorized users to view files and to execute local scripts; other attacks are also possible...

Portix-PHP 2-0.3.2 Portal - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/18227/info Portix-PHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in...