TYPO3 Security Bulletin

It has been discovered that the extension powermail powermail is vulnerable to Cross-Site Scripting, SQL Injection and Validation Bypass Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.5.3 and below Vulnerability...

CVE-2003-1410

The CVE-2003-1410 entry refers to a PHP remote file inclusion in Cedric Email Reader (versions 0.2 and 0.3) where the cer_skin parameter in email.php (aka email.php3) can allow an attacker to execute arbitrary PHP code. Connected documents confirm the affected software and the vulnerability class...

CVE-2003-1411

The CVE-2003-1411 entry concerns a PHP remote file inclusion vulnerability in Cedric Email Reader 0.4. The flaw resides in the file emailreader_execute_on_each_page.inc.php and is exploitable via the emailreader_ini parameter, allowing a remote attacker to execute arbitrary PHP code. This is a co...

Directory traversal

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbitrary PHP code via a URL in the chemin parameter to 1 modnews/index.php, 2 modnews/goodies.php, or 3 modsearch/index.php. NOTE: The provenance of this information is unknown; the...

CVE-2007-0820

Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbitrary PHP code via a URL in the chemin parameter to 1 modnews/index.php, 2 modnews/goodies.php, or 3 modsearch/index.php. NOTE: The provenance of this information is unknown; the...

CVE-2007-0821

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0821

Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary files via a .. dot dot in the chemin parameter to 1 modnews/index.php or 2 modnews/goodies.php. NOTE: The provenance of this information is unknown; the details are obtained solely...

CVE-2007-0821

CVE-2007-0821 describes multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2. An attacker can read arbitrary files by injecting a .. sequence into the chemin parameter of two PHP scripts: mod_news/index.php and mod_news/goodies.php. The underlying issue is improper validatio...

CVE-2007-0820

CVE-2007-0820: Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 permit remote code execution via a URL in the chemin parameter to mod_news/index.php, mod_news/goodies.php, or mod_search/index.php. Root cause: inclusion of remote files enabled through user-controlla...

mediabox404.txt

Product: mediabox404 WebRadio & WebTV manager Version: 1.2 Release and previous URL: http://www.mediabox404.org VULNERABILITY CLASS: SQL injection PRODUCT DESCRIPTION This is a group of modulesadministration, client, programmation, diffusion in PHP/MySQL database that allows a webradio to manage...

SQL injection in mediabox404 v1.2

Product: mediabox404 WebRadio & WebTV manager Version: 1.2 Release and previous URL: http://www.mediabox404.org VULNERABILITY CLASS: SQL injection PRODUCT DESCRIPTION This is a group of modulesadministration, client, programmation, diffusion in PHP/MySQL database that allows a webradio to manage...

CVE-2003-1410

PHP remote file inclusion vulnerability in email.php aka email.php3 in Cedric Email Reader 0.2 and 0.3 allows remote attackers to execute arbitrary PHP code via the cerskin parameter...

CVE-2003-1411

PHP remote file inclusion vulnerability in emailreaderexecuteoneachpage.inc.php in Cedric Email Reader 0.4 allows remote attackers to execute arbitrary PHP code via the emailreaderini parameter...