CVE-2023-42454: Exposure of Sensitive Information to an Unauthorized Actor

SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly, with a database connection string specified in the sqlpage/sqlpage.json configuration file not in an environment variable, with the webroot is the current working...

WS-2016-7106

In “SiCKRAGE”, v3.0.0 to v4.2.5 are vulnerable against FPD Full Path Disclosure as a result of a returned ‘WEBROOT’ in ‘getupdateurl’...

CVE-2008-4141: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the webroot parameter to 1 includes/functioncore.php and 2 templates/layoutlyrics.php...

CVE-2006-7131: Undefined Security Weakness

PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the webroot parameter...