PT-2008-5439

Name of the Vulnerable Software and Affected Versions Quick.Cart version 3.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the query string in the admin.php file. Recommendations For Quick.Cart version...

CVE-2007-2008

Directory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2006-4584

Tr Forum 2.0 is affected by CVE-2006-4584, where remote attackers can bypass authentication and add an administrative account via login and password parameters to admin/insert_admin.php. The vulnerability allows partial confidentiality, integrity, and availability impact (CVSS v2 base score 7.5, ...

PT-2004-2741 · Php Nuke · Php-Nuke

Name of the Vulnerable Software and Affected Versions: Php-Nuke versions 6.x through 7.1.0 Description: A cross-site request forgery issue allows remote attackers to gain administrative privileges. This can be achieved via an img tag with a URL to "admin.php". Recommendations: For Php-Nuke versio...