CVE-2010-2669: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editors/text/editor-body.php in Orbis CMS 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter...

CVE-2008-1645: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in body.php in phpSpamManager phpSM 0.53 beta allows remote attackers to read arbitrary local files via a .. dot dot in the filename parameter...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

No description provided by source. phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME'...

PHPSpamManager 0.53b - 'body.php' Remote File Disclosure

phpSpamManager 0.53 beta body.php Remote File Disclosure Vulnerability D.Script : http://sourceforge.net/project/showfiles.php?groupid=141000 Vuln Code Ln 38 - 47 : //get filename $okprint=false; $filename = $REQUEST'filename'; --- XxX if $filename!='FILENAME' debugprint"analysing " .$filename;...

phpSpamManager 0.53b (body.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== phpSpamManager 0.53b body.php Remote File Disclosure Vulnerability ==================================================================== phpSpamManager 0.53 beta body.php...

CVE-2006-6957: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...

Docebo Core 3.0.3, Remote command execution

----------------------------------------------------- Advisory id: FSA:008 Author: Federico Fazzi Date: 09/06/2006, 6:44 Sinthesis: Docebo Core 3.0.3, Remote command execution Type: high Product: http://www.docebolms.org/ Patch: unavailable ----------------------------------------------------- 1...