CVE-2008-6280: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

CVE-2008-6201

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6130: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in moziloWiki 1.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 action and 2 page parameters...

CVE-2008-6098: Undefined Security Weakness

Bugzilla 3.2 before 3.2 RC2, 3.0 before 3.0.6, 2.22 before 2.22.6, 2.20 before 2.20.7, and other versions after 2.17.4 allows remote authenticated users to bypass moderation to approve and disapprove quips via a direct request to quips.cgi with the action parameter set to "approve."...

CVE-2008-5889: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in user.asp in Click&Rank allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2008-4931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php...

CVE-2008-4393: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VeriSign Kontiki Delivery Management System DMS 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to zodiac/servlet/zodiac...

noname-lfi.txt

NoName Script 1.0 Local File Inclusion + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz Example : http://localhost/index.php?action=../../../autoexec.bat%00 This will open autoexec.bat...

Directory traversal

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-2695

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-2695: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

CVE-2008-2677: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2008-2675: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PHP Image Gallery allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Directory traversal

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter...

CVE-2008-0068

CVE-2008-0068 describes a directory traversal vulnerability in HP OpenView Network Node Manager (OV NNM) OpenView5.exe, affecting OV NNM versions 7.01, 7.51, and 7.53. The vulnerability allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter. HP’s...

CVE-2008-0068: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter...

Directory traversal

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-1642

Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-0812: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...

DEBIAN-CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...