CVE-2008-4439

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-4438

CVE-2008-4438 affects Datafeed Studio 1.6.2, where a Cross-Site Scripting (XSS) flaw exists in search.php due to the q parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML. The CVSS2 base score is 4.3 (Medium) with network attack vector, requiring no authent...

CVE-2008-4438

Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4439

CVE-2008-4439 affects MartinWood Datafeed Studio prior to 1.6.3, where PHP remote file inclusion is possible in admin/bin/patch.php via the INSTALL_FOLDER URL parameter, enabling remote execution of PHP code. Exploitation details are described in vendor references; one cited path notes a Datafeed...

CVE-2008-4439

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-4439: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-4438: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.php in Datafeed Studio 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Datafeed Studio - patch.php Remote File Inclusion

Datafeed Studio - patch.php Remote File Inclusion source: https://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

Datafeed Studio - 'patch.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in th...

Datafeed Studio 1.6.2 - 'search.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30660/info Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

Datafeed Studio 1.6.2 - search.php Cross-Site Scripting

Datafeed Studio 1.6.2 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30660/info Datafeed Studio is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrar...