3 matches found
PT-2011-1973
Name of the Vulnerable Software and Affected Versions Groone's Simple Contact Form affected versions not specified Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter in the contact/contact.php file. Recommendations For Groone's Simple...
CVE-2010-5038: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...
CVE-2006-6520
Multiple cross-site scripting XSS vulnerabilities in Messageriescripthp 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 pseudo parameter to a existepseudo.php, the 2 email parameter to b existeemail.php, or the 3 pageName or 4 cssform parameter to c Contact/contact.php...