CVE-2008-5164: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to a viewarticle.php and b viewarticle2.php and the 2 PATHINFO to viewarticle.php...

CVE-2006-4545: Undefined Security Weakness

PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the SERVER parameter in 1 admin/avatar.php, 2 libs/archive.class.php, 3 libs/login.php, 4 libs/profiles.class.php, and 5 libs/profile/proccess.php. NOTE: CVE disputes thi...

CVE-2006-4545

ModuleBased CMS Pre-Alpha is affected by a PHP remote file inclusion risk in multiple files (admin/avatar.php, libs/archive.class.php, libs/login.php, libs/profiles.class.php, libs/profile/proccess.php) via the _SERVER parameter. The underlying concern is that the _SERVER array and _SERVER[DOCUME...