CVE-2022-1391

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...

PT-2022-13851 · WordPress · Cab Fare Calculator

Name of the Vulnerable Software and Affected Versions: Cab fare calculator WordPress plugin versions prior to 1.0.4 Description: The issue is related to the lack of validation of the controller parameter, which is used in require statements. This could lead to Local File Inclusion issues...

CVE-2022-1391: Improper Limitation of a Pathname to a Restricted Directory

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in require statements, which could lead to Local File Inclusion issues...

YzmCMS 跨站脚本漏洞

YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. A stored cross-site scripting vulnerability exists in the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter in YzmCMS version 5.6. The vulnerabilit...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28406)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the foreignid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of ...

T Mobile Business - CS Cross Site Scripting Vulnerability

Document Title: =============== T Mobile Business - CS Cross Site Scripting Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1566 Release Date: ============= 2015-08-10 Vulnerability Laboratory ID VL-ID: ====================================...

Joomla Component JoomMail com_joommail Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================== o Joomla Component JoomMail Local File Inclusion Vulnerability Software : comjoommail version 1.0 Author : AntiSecurity Vrs-hCk NoGe OoNBoY Paman zxvf...

Directory traversal

Directory traversal vulnerability in Jstore comjstore component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

Joomla Boss Component LFI Vulnerability (Jan 2012) - Active Check

Joomla Boss component is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2011-4804: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the obSuggest comobsuggest component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Directory traversal

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a showreport action...

Joomla Component 'com_jresearch' Local File Inclusion Vulnerability

This host is running Joomla and is prone to local file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodjoomlacomjresearchlfivuln.nasl 7577 2017-10-26 10:41:56Z cfischer $ Joomla Component 'comjresearch' Local File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

Directory traversal

Directory traversal vulnerability in the Picasa2Gallery compicasa2gallery component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2259

Directory traversal vulnerability in the BF Survey combfsurvey component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-2122: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SimpleDownload comsimpledownload component before 0.9.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-2037

Directory traversal vulnerability in the Percha Downloads Attach comperchadownloadsattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2033

Directory traversal vulnerability in the Percha Multicategory Article comperchacategoriestree component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2034

Directory traversal vulnerability in the Percha Image Attach comperchaimageattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2035

Directory traversal vulnerability in the Percha Gallery comperchagallery component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...

CVE-2010-2034: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Percha Image Attach comperchaimageattach component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the controller parameter to index.php...