AtMail 1.04 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/52684/info AtMail is prone to multiple directory-traversal vulnerabilities, an arbitrary-file-upload vulnerability, and an information-disclosure vulnerability because the application fails to sanitize user-supplied input. An attacker can exploit these...

Maxs PHP Photo Album 1.0 - id Local File Inclusion

Maxs PHP Photo Album 1.0 - id Local File Inclusion source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and...

Maxs Guestbook 1.0 - Multiple Remote Vulnerabilities

Maxs Guestbook 1.0 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/52471/info Max's Guestbook is prone to multiple remote vulnerabilities. Exploiting these issues could allow an attacker to execute arbitrary HTML and script code in the context of the affected browser,...

Max's PHP Photo Album 1.0 - 'id' Local File Inclusion

source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserv...

OSClass Directory Traversal and Arbitrary File Upload Vulnerabilities

OSClass is prone to a directory traversal vulnerability and an arbitrary-file- upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

ToendaCMS 1.6.2 - setupindex.php?site Traversal Local File Inclusion

ToendaCMS 1.6.2 - setupindex.php?site Traversal Local File Inclusion source: https://www.securityfocus.com/bid/52350/info ToendaCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

ToendaCMS 1.6.2 - '/setup/index.php?site' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/52350/info ToendaCMS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal...

OSClass 2.3.x - Directory Traversal Arbitrary File Upload

OSClass 2.3.x - Directory Traversal Arbitrary File Upload source: https://www.securityfocus.com/bid/52336/info OSClass is prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues to obtain sensitive information and to upload...

OSClass 2.3.x - Directory Traversal / Arbitrary File Upload

source: https://www.securityfocus.com/bid/52336/info OSClass is prone to a directory-traversal vulnerability and an arbitrary-file-upload vulnerability. An attacker can exploit these issues to obtain sensitive information and to upload arbitrary code and run it in the context of the webserver...

Open Realty 2.5.x - select_users_template Local File Inclusion

Open Realty 2.5.x - selectuserstemplate Local File Inclusion source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

Open Realty 2.5.x - 'select_users_template' Local File Inclusion

source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 Multiple Remote Code Execution Vulnerabilities

IBM Tivoli Provisioning Manager soapServlet SOAP Message Printer.getPrinterAgentKey SQL Injection Vulnerability This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Provisioning Manager Express for Software Distribution. Authentication is...

Microsoft IIS Default Welcome Page Information Disclosure Vulnerability

Microsoft IIS Webserver is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft IIS IP Address/Internal Network Name Disclosure Vulnerability - Active Check

Microsoft Internet Information Services IIS Webserver is prone to an IP address disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

HP StorageWorks P2000 G3 directory traversal vulnerability

Overview HP StorageWorks P2000 G3 contains a directory traversal vulnerability which may allow a remote, unauthenticated attacker to obtain sensitive information. Description HP StorageWorks P2000 G3 contains an embedded webserver which is vulnerable to a directory traversal vulnerability which m...

Joomla! Component com_xcomp - Local File Inclusion

Joomla! Component comxcomp - Local File Inclusion source: https://www.securityfocus.com/bid/52078/info The Xcomp component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

Joomla! Component com_xcomp - Local File Inclusion

source: https://www.securityfocus.com/bid/52078/info The Xcomp component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitra...

Joomla! Component com_xvs - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/52091/info The 'comxvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute...

Joomla! Component com_xvs - Controller Local File Inclusion

Joomla! Component comxvs - Controller Local File Inclusion source: https://www.securityfocus.com/bid/52091/info The 'comxvs' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability t...

Pandora FMS 4.0.1 - sec2 Local File Inclusion

Pandora FMS 4.0.1 - sec2 Local File Inclusion source: https://www.securityfocus.com/bid/52058/info Pandora FMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scrip...