YACS CMS 10.5.27 - context[path_to_root] Remote File Inclusion

YACS CMS 10.5.27 - contextpathtoroot Remote File Inclusion source: https://www.securityfocus.com/bid/41773/info Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion

source: https://www.securityfocus.com/bid/41773/info Yacs CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary script code in th...

Bugzilla 3.7/3.7.1 Information Disclosure

According to its banner, the version of Bugzilla installed on the remote host fails to restrict access to bugs created with inbound email interface emailin.pl or with 'Bug.create' method in the WebServices interface to 'mandatory' or 'Default' groups. This could allow bug information to become...

Asterisk Recording Interface Cross Site Request Forgery / Cross Site Scripting / Denial Of Service / Local File Inclusion

Found By: TurboBorland Email: [email protected] Software: Asterisk Recording Interface Date Found: 07/01/2010 Ethical Disclosure: Site down, no other location for project, author can not be found, no one to get in touch with. Submission. Vulnerabilities: LFI steal voicemail only need to supply...

CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload

CMS Made Simple Module Antz Toolkit 1.02 - Arbitrary File Upload source: https://www.securityfocus.com/bid/41569/info The Antz toolkit module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-suppli...

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload source: https://www.securityfocus.com/bid/41564/info The Download Manager module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize...

CMS Made Simple Module Download Manager 1.4.1 - Arbitrary File Upload

source: https://www.securityfocus.com/bid/41564/info The Download Manager module for CMS Made Simple is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to uploa...

CMS Made Simple 1.8 - 'default_cms_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/41565/info CMS Made Simple is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

Sandbox Multiple Remote Vulnerabilities

Sandbox is prone to multiple remote vulnerabilities, including multiple SQL-injection vulnerabilities, a local file-include vulnerability, and multiple arbitrary-file-upload vulnerabilities. Exploiting these issues could allow an attacker to upload and execute arbitrary code within the context of...

nuBuilder Local File Include and Cross Site Scripting Vulnerabilities

nuBuilder is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

Joomla! Component Canteen 1.0 - Local File Inclusion

Joomla! Component Canteen 1.0 - Local File Inclusion source: https://www.securityfocus.com/bid/41358/info The Miniwork Studio Canteen component for Joomla! is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied dat...

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting

SocialABC NetworX 1.0.3 - Arbitrary File Upload Cross-Site Scripting source: https://www.securityfocus.com/bid/41396/info SocialABC NetworX is prone to an arbitrary file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize...

Joomla! Component Canteen 1.0 - Local File Inclusion

source: https://www.securityfocus.com/bid/41358/info The Miniwork Studio Canteen component for Joomla! is prone to an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can exploit the SQL-injection...

SocialABC NetworX 1.0.3 - Arbitrary File Upload / Cross-Site Scripting

source: https://www.securityfocus.com/bid/41396/info SocialABC NetworX is prone to an arbitrary file-upload vulnerability and a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to steal cookie-based...

Splunk Cross Site Scripting and Directory Traversal Vulnerabilities

Splunk is prone to multiple cross-site scripting vulnerabilities and multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user i...

Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

PithCMS 'lang' Parameter Local File Include Vulnerability

PithCMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

Plesk Server Administrator (PSA) - locale Local File Inclusion

Plesk Server Administrator PSA - locale Local File Inclusion source: https://www.securityfocus.com/bid/40813/info Plesk Server Administrator PSA is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Plesk Server Administrator (PSA) - 'locale' Local File Inclusion

source: https://www.securityfocus.com/bid/40813/info Plesk Server Administrator PSA is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrar...