DataLife Engine 8.3 - '/engine/inc/include/init.php?selected_language' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

THELIA 1.4.2.1Multiple Cross-Site Scripting Vulnerabilities

THELIA 1.4.2.1Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37855/info THELIA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage...

LetoDms 1.4.x - 'lang' Local File Inclusion

source: https://www.securityfocus.com/bid/37828/info LetoDMS formerly known as MyDMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying computer;...

Design/Logic Flaw

DISPUTED Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator. NOTE:...

Design/Logic Flaw

header.c in Cherokee before 0.99.32 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal...

CVE-2009-4492

CVE-2009-4492 affects WEBrick in Ruby: WEBrick 1.3.1 on Ruby 1.8.6–patchlevel 383, 1.8.7–patchlevel 248, 1.8.8dev, 1.9.1–patchlevel 376, and 1.9.2dev logs non‑printable characters and may allow a remote attacker to modify a window title or possibly execute commands/overwrite files via an HTTP esc...

CVE-2009-4491

thttpd 2.25b0 logs data without sanitizing non‑printable characters, potentially allowing a remote attacker to modify a window title or execute commands/overwrite files via an HTTP request with a terminal-escape sequence. Root cause is unfiltered log output. No specific patch/version fix is detai...

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities

@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

Freewebscriptz Online Games Login - Multiple SQL Injections

Freewebscriptz Online Games Login - Multiple SQL Injections source: https://www.securityfocus.com/bid/41267/info Free Web Scriptâ??z Online Games is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

XOOPS Content Module 0.5 SQL Injection Vulnerability

XOOPS is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescriptio...

F3Site 2009 - modpoll.php?GLOBALS[nlang] Traversal Local File Inclusion

F3Site 2009 - modpoll.php?GLOBALSnlang Traversal Local File Inclusion source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

phpldapadmin 'cmd.php' Local File Include Vulnerability

phpldapadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. phpldapadmin 1.1.0.5 is vulnerable; other...

Horde 3.3.5 - Administration Interface admincmdshell.php?PATH_INFO Cross-Site Scripting

Horde 3.3.5 - Administration Interface admincmdshell.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

Horde 3.3.5 - Administration Interface adminsqlshell.php?PATH_INFO Cross-Site Scripting

Horde 3.3.5 - Administration Interface adminsqlshell.php?PATHINFO Cross-Site Scripting source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

No description provided by source. UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

UBBCentral UBB.Threads 7.5.4 2 - Multiple File Inclusions

UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone to multiple file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible...

CORE-2009-0908: Autodesk SoftImage Scene TOC Arbitrary Command Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Autodesk SoftImage Scene TOC Arbitrary Command Execution 1. Advisory Information Title: Autodesk SoftImage Scene TOC Arbitrary Command Execution Advisory Id:...