Jupiter CMS 1.1.4/1.1.5 - '/modules/mass-email.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20048/info Jupiter CMSA is prone to multiple input-validation vulnerabilities, including cross-site scripting, SQL-injection, and arbitrary file-upload issues, because the application fails to sanitize user-supplied input. A successful exploit of these...

DCP-Portal 6.0 - adminincfooter.inc.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 6.0 - adminincfooter.inc.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues,...

DCP-Portal 6.0 - adminincheader.inc.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 6.0 - adminincheader.inc.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues,...

DCP-Portal 6.0 - '/admin/inc/header.inc.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of the...

SQL-Ledger 2.6.xLedgerSMB 1.0 - Terminal Directory Traversal

SQL-Ledger 2.6.xLedgerSMB 1.0 - Terminal Directory Traversal source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in t...

SQL-Ledger 2.6.x/LedgerSMB 1.0 - 'Terminal' Directory Traversal

source: https://www.securityfocus.com/bid/19960/info SQL-Ledger and LedgerSMB are prone to a remote directory-traversal vulnerability. An attacker can exploit this issue to include arbitrary files located on the vulnerable computer in the context of the webserver process. The attacker may be able...

In-portal In-Link 2.3.4 - 'ADODB_DIR.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in...

In-portal In-Link 2.3.4 - ADODB_DIR.php Remote File Inclusion

In-portal In-Link 2.3.4 - ADODBDIR.php Remote File Inclusion source: https://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

Papoo CMS 3.2 - IBrowser Remote File Inclusion

Papoo CMS 3.2 - IBrowser Remote File Inclusion source: https://www.securityfocus.com/bid/19807/info Papoo CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containin...

ToendaCMS 0.x/1.0.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

ToendaCMS 0.x1.0.x - Remote File Inclusion

ToendaCMS 0.x1.0.x - Remote File Inclusion source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

YACS 6.6.1 - Multiple Remote File Inclusions

YACS 6.6.1 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19799/info YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...

Papoo CMS 3.2 - IBrowser Remote File Inclusion

source: https://www.securityfocus.com/bid/19807/info Papoo CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

YACS 6.6.1 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19799/info YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execut...

ExBB 1.9.1 - Home_Path Multiple Remote File Inclusions

ExBB 1.9.1 - HomePath Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...

ExBB 1.9.1 - 'Home_Path' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in th...

Alstrasoft Template Seller - Config[Template_Path] Multiple Remote File Inclusions

Alstrasoft Template Seller - ConfigTemplatePath Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19769/info AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An...

EZContents 2.0.3 - calendar.php?GLOBALS[language_home] Remote File Inclusion

EZContents 2.0.3 - calendar.php?GLOBALSlanguagehome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

Alstrasoft Template Seller - 'Config[Template_Path]' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19769/info AlstraSoft Template Seller is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

EZContents 2.0 - 'gallery_summary.php?GLOBALS[admin_home]' Remote File Inclusion

source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...