2697 matches found
Basic Analysis and Security Engine (BASE) 1.4.5 - '/includes/base_action.inc.php?base_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...
OpenEMR 4.1 - Interfacefaxfax_dispatch.php?File exec() Call Arbitrary Shell Command Execution
OpenEMR 4.1 - Interfacefaxfaxdispatch.php?File exec Call Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker...
OpenEMR 4.1 - '/contrib/acog/print_form.php?formname' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote attacker can exploit these issues to execute arbitrary shell commands with the privileges of the us...
Alsbtain Bulletin 1.5/1.6 - Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/50350/info Alsbtain Bulletin is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary...
WordPress teachPress 'root' Multiple Local File Include Vulnerabilities
The teachPress plug-in for WordPress is prone to multiple local file include vulnerabilities because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
2Moons 1.4 - Multiple Remote File Inclusions
2Moons 1.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50046/info 2Moons is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obta...
2Moons 1.4 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/50046/info 2Moons is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute arbitrary...
Jaws 0.8.14 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/50022/info Jaws is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute arbitrary...
StarDevelop LiveHelp 2.0 - index.php Local File Inclusion
StarDevelop LiveHelp 2.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/49650/info StarDevelop LiveHelp is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...
Joomla! JoomTouch Component 'controller' Parameter Local File Include Vulnerability
The JoomTouch component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserve...
Trend Micro Data Loss Prevention Directory Traversal Vulnerability
Trend Micro Data Loss Prevention is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user- supplied input. A remote attacker could exploit this vulnerability using directory- traversal strings such as '../' to gain access to arbitrary files on the targeted...
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion source: https://www.securityfocus.com/bid/47263/info vtiger CRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...
UseBB 1.0.11 - 'admin.php' Local File Inclusion
source: https://www.securityfocus.com/bid/47166/info UseBB is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the...
InterPhoto Image Gallery 2.4.2 - IPLANG Local File Inclusion
InterPhoto Image Gallery 2.4.2 - IPLANG Local File Inclusion source: https://www.securityfocus.com/bid/46759/info InterPhoto Image Gallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...
Raja Natarajan Guestbook 'lang' Parameter Local File Include Vulnerability
The Raja Natarajan Guestbook is prone to a local file-include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver...
Betsy 4.0 - 'page' Local File Inclusion
source: https://www.securityfocus.com/bid/46124/info Betsy is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the...
openSite 'db_driver' Parameter Multiple Local File Include Vulnerabilities
openSite is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. Thi...
Ignition Multiple Local File Include and Remote Code Execution Vulnerabilities
Ignition is prone to multiple local file-include vulnerabilities and a remote code execution vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts an...
Abtp Portal Project 'ABTPV_BLOQUE_CENT' Parameter Local and Remote File Include Vulnerabilities
Abtp Portal Project is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to compromise the application and the underlying compute...
TFTgallery 'thumbnailformpost.inc.php' Local File Include Vulnerability
TFTgallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...