Sql injection

Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...

PT-2012-2031

Name of the Vulnerable Software and Affected Versions WP Symposium plugin versions prior to 11.12.24 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension using "uploadify/upload admin avatar.php" or "uploadify/upload profile...

CVE-2006-4545: Undefined Security Weakness

PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the SERVER parameter in 1 admin/avatar.php, 2 libs/archive.class.php, 3 libs/login.php, 4 libs/profiles.class.php, and 5 libs/profile/proccess.php. NOTE: CVE disputes thi...