816 matches found
eliteCMS 1.0 'page' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30990/info eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit...
Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution
No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected]...
LineWeb 1.0.5 Multiple Remote Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these issues to...
Antologic Antolinux 1.0 Administrative Interface NDCR Parameter Remote Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/9495/info It has been reported that Antologic Antolinux may be prone to a remote command execution vulnerability that may allow an attacker to execute arbitrary commands with the privileges of the server hosting the...
DataLife Engine 8.3 engine/inc/help.php config[langs] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
Fujitsu Web-Based Admin View 2.1.2 - Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30780/info Fujitsu Web-Based Admin View is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. This issue occurs in the application's HTTP server...
PowerPortal 1.3 - Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11681/info PowerPortal is reported vulnerable to remote SQL injection. This issue is due to a failure of the application to properly validate user-supplied input prior to including it in an SQL query. PowerPortal 1.3 is...
Quick Classifieds 1.0 - include/sendit2.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Comersus Cart 5.0 HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11083/info Comersus Cart is reported prone to a HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This...
Drake CMS 0.4.11 RC8 - 'd_root' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28165/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
CONTENTCustomizer 3.1 Dialog.PHP Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26291/info CONTENTCustomizer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks. CONTENTCustomizer 3.1mp is vulnerable;...
PHMe 0.0.2 Function_List.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25011/info PHMe is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. PHMe...
PHPAccounts 0.5 Index.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24572/info PHP Accounts is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local script...
iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability
No description provided by source. /iScripts SocialWare 2.2.x Arbitrary File Upload Vulnerability Name iScripts SocialWare Vendor http://www.iscripts.com Versions Affected 2.2.x Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com...
ISPmanager 4.2.15 Responder Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26503/info ISPmanager is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges on the affected computer. A successful exploit will lead to the complete...
Photokorn 1.542 Cross Site Scripting and Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/37559/info Photokorn is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute...
My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28400/info My Web Doc is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. My Web Doc 2000 Final is vulnerable;...
Systeme de vote pour site Web 1.0 Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25335/info 'Systeme de vote pour site Web' is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromis...
eCardMAX HotEditor 4.0 Keyboard.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23377/info eCardMAX HotEditor is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local...
Bitweaver 1.1.1 view.php blog_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...