PT-2014-4255

Name of the Vulnerable Software and Affected Versions MediaWiki versions 1.19.x through 1.19.10 MediaWiki versions 1.21.x through 1.21.4 MediaWiki versions 1.22.x through 1.22.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in certain...

CVE-2010-2669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2008-1645: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

No description provided by source. phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME'...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== phpSpamManager 0.53b body.php Remote File Disclosure Vulnerability ==================================================================== phpSpamManager 0.53 beta body.php...

PHPSpamManager 0.53b - 'body.php' Remote File Disclosure

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

CVE-2006-6957: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...

Docebo Core 3.0.3, Remote command execution

----------------------------------------------------- Advisory id: FSA:008 Author: Federico Fazzi Date: 09/06/2006, 6:44 Sinthesis: Docebo Core 3.0.3, Remote command execution Type: high Product: http://www.docebolms.org/ Patch: unavailable ----------------------------------------------------- 1...