4 matches found
CVE-2007-2433
Cross-site scripting XSS vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web script or HTML via the ARLogin parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-2433
CVE-2007-2433 describes a cross-site scripting (XSS) vulnerability in Ariadne 2.4.1. The flaw resides in index.php, where the ARLogin parameter enables remote attackers to inject arbitrary web script or HTML. The available connected documents confirm the affected product/version and the vulnerabl...
CVE-2006-5776
Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in 1 ftp/loader.php and 2 lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outsi...
CVE-2006-5776
Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in 1 ftp/loader.php and 2 lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outsi...