[CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability

Title: CAID 34661: CA Unicenter WSDM File System Read Access Vulnerability CA Vulnerability ID CAID: 34661 CA Advisory Date: 2006-10-03 Discovered By: Oliver Karow, Symantec Security Consultant oliverkarow at symantec dot com Richard Sammet, Symantec Security Consultant richardsammet at symantec...

DeluxeBB 1.09 - Sig.php Remote File Inclusion

DeluxeBB 1.09 - Sig.php Remote File Inclusion source: https://www.securityfocus.com/bid/20292/info DeluxeBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

IMCE file handling vulnerabilities

IMCE has two vulnerabilities with regards to file handling. 1. By passing relative paths to IMCE's delete function, a malicious user with the "delete files" permission can delete files anywhere in the directory tree depending on the access permissions of the webserver. 2. IMCE allows the upload...

DeluxeBB 1.09 - 'Sig.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20292/info DeluxeBB is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it i...

[MajorSecurity Advisory #28]ConPresso CMS - Multiple Cross Site Scripting and SQL Injection Issues

MajorSecurity Advisory 28ConPresso CMS - Multiple XSS and SQL Injection Issues Details ======= Product: ConPresso CMS Affected Version: =4.0.4a Immune Version: 4.0.5a Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.com/ Vendor-Status: informed Advisory-Status:...

WebNews 1.4 - parser.php Remote File Inclusion (2)

WebNews 1.4 - parser.php Remote File Inclusion 2 source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...

Web//News 1.4 - 'parser.php' Remote File Inclusion (2)

source: https://www.securityfocus.com/bid/20239/info Web//News is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute i...

PHPSelect Web Development - 'index.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/20231/info PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affect...

Plain Old WebServer 0.0.70.0.8 Firefox Extension - Directory Traversal

Plain Old WebServer 0.0.70.0.8 Firefox Extension - Directory Traversal source: https://www.securityfocus.com/bid/22502/info Plain Old Webserver is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an...

Back-End CMS 0.4.5 - search.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - search.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an...

Quickblogger 1.4 - Remote File Inclusion

Quickblogger 1.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/20210/info Quickblogger is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary...

Back-End CMS 0.4.5 - adminindex.php?includes_path Remote File Inclusion

Back-End CMS 0.4.5 - adminindex.php?includespath Remote File Inclusion source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows ...

Plain Old WebServer 0.0.7/0.0.8 Firefox Extension - Directory Traversal

source: https://www.securityfocus.com/bid/22502/info Plain Old Webserver is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attack...

PHP_news 2.0 - creat_news_all.php?language Remote File Inclusion

PHPnews 2.0 - creatnewsall.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...

BBSNew 2.0.1 - index2.php Remote File Inclusion

BBSNew 2.0.1 - index2.php Remote File Inclusion source: https://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary...

PHP_news 2.0 - '/admin/catagory.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

PHP_news 2.0 - '/admin/news.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

PHP_news 2.0 - 'user_user.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...

Quickblogger 1.4 - Remote File Inclusion

source: https://www.securityfocus.com/bid/20210/info Quickblogger is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer...

BandSite CMS 1.1 - signgbook_content.php Cross-Site Scripting

BandSite CMS 1.1 - signgbookcontent.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to...