Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion

Maintain 3.0.0-RC2 - Example6.php Remote File Inclusion source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

ironwebmail 6.1.1 - Directory Traversal Information Disclosure

ironwebmail 6.1.1 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/20436/info IronWebMail is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote,...

Maintain 3.0.0-RC2 - 'Example6.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

ironwebmail 6.1.1 - Directory Traversal Information Disclosure

source: https://www.securityfocus.com/bid/20436/info IronWebMail is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve the contents of arbitrary...

PHP TopSites FREE 1.022b - config.php Remote File Inclusion

PHP TopSites FREE 1.022b - config.php Remote File Inclusion source: https://www.securityfocus.com/bid/20486/info PHP TopSites is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PH...

FreeWPS 2.11 - upload.php Remote Command Execution

FreeWPS 2.11 - upload.php Remote Command Execution source: https://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version...

FreeWPS 2.11 - 'upload.php' Remote Command Execution

source: https://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version 2.11 is vulnerable to this issue; other versions m...

PHP TopSites FREE 1.022b - 'config.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20486/info PHP TopSites is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This...

Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities

Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities source: https://www.securityfocus.com/bid/20468/info Dokeos is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can explo...

CommunityPortals 1.0 - bug.php Remote File Inclusion

CommunityPortals 1.0 - bug.php Remote File Inclusion source: https://www.securityfocus.com/bid/20466/info CommunityPortals is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP...

Gcards 1.13 - Addnews.php Remote File Inclusion

Gcards 1.13 - Addnews.php Remote File Inclusion source: https://www.securityfocus.com/bid/20461/info gcards is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in...

Gcards 1.13 - 'Addnews.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20461/info gcards is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may...

CommunityPortals 1.0 - 'bug.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20466/info CommunityPortals is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process...

Tagit2b - DelTagUser.php Remote File Inclusion

Tagit2b - DelTagUser.php Remote File Inclusion source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in...

Tagit2b - 'DelTagUser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may...

ISearch 2.16 - ISEARCH_PATH Remote File Inclusion

ISearch 2.16 - ISEARCHPATH Remote File Inclusion source: https://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Deep CMS 2.0 - index.php Remote File Inclusion

Deep CMS 2.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/20402/info Deep CMS is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Deep CMS 2.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20402/info Deep CMS is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with th...

ISearch 2.16 - 'ISEARCH_PATH' Remote File Inclusion

source: https://www.securityfocus.com/bid/20401/info iSearch is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the...

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/20398/info PHP Polling Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issu...