Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_stat_uaddr.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_user.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - baseuser.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_graph_display.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basegraphdisplay.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_common.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatcommon.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_iplink.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatiplink.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - base_stat_ipaddr.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - basestatipaddr.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_state_criteria.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbasestatecriteria.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these...

Basic Analysis and Security Engine (BASE) 1.4.5 - includesbase_output_html.inc.php?base_path Remote File Inclusion

Basic Analysis and Security Engine BASE 1.4.5 - includesbaseoutputhtml.inc.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issue...

Basic Analysis and Security Engine (BASE) 1.4.5 - setupbase_conf_contents.php Multiple Remote File Inclusions

Basic Analysis and Security Engine BASE 1.4.5 - setupbaseconfcontents.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to...

Nova CMS - '/administrator/modules/moduleslist.php?id' Remote File Inclusion

source: https://www.securityfocus.com/bid/51976/info Nova CMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute malicio...

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_main.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/setup2.php?ado_inc_PHP' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_qry_common.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_user.php?base_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...

Dolibarr ERPCRM 3.x - adherentsfiche.php SQL Injection

Dolibarr ERPCRM 3.x - adherentsfiche.php SQL Injection source: https://www.securityfocus.com/bid/51956/info Dolibarr is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attack...

OpenEMR 4.1 - '/contrib/acog/print_form.php?formname' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the us...

OpenEMR 4.1 - Interfacefaxfax_dispatch.php?File exec() Call Arbitrary Shell Command Execution

OpenEMR 4.1 - Interfacefaxfaxdispatch.php?File exec Call Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker...

OpenEMR 4.1 - '/Interface/fax/fax_dispatch.php?File' 'exec()' Call Arbitrary Shell Command Execution

source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the us...

4Images 1.7.10 - admincategories.php?cat_parent_id Cross-Site Scripting

4Images 1.7.10 - admincategories.php?catparentid Cross-Site Scripting source: https://www.securityfocus.com/bid/51774/info 4images is prone to multiple input-validation vulnerabilities including: 1. A cross-site scripting vulnerability. 2. An open-redirection vulnerability. 3. An SQL-injection...

Joomla! Component com_cmotour - id SQL Injection

Joomla! Component comcmotour - id SQL Injection source: https://www.securityfocus.com/bid/51779/info The 'comcmotour' component for Joomla! is prone to an SQL injection vulnerability. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit laten...