CVE-2008-5748: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the 1 lang, 2 theme, and 3 module parameters...

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access

CONTENTCustomizer 3.1 - Dialog.php Unauthorized Access source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete...

CONTENTCustomizer 3.1 - 'Dialog.php' Unauthorized Access

source: https://www.securityfocus.com/bid/26437/info CONTENTCustomizer is prone to an unauthorized access vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker could exploit this issue to delete arbitrary files, rename files, or reset the content of...

CVE-2007-5816

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page...

CVE-2007-5817

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a 1 del, 2 delbackup, 3 res, or 4 ren action. NOTE: this issue can be leveraged to conduct cross-site scripting XSS and possibly other attacks...

CVE-2007-5817

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a 1 del, 2 delbackup, 3 res, or 4 ren action. NOTE: this issue can be leveraged to conduct cross-site scripting XSS and possibly other attacks...

CVE-2007-5817

CVE-2007-5817 affects CONTENTCustomizer 3.1mp and earlier. The issue allows remote attackers to perform certain privileged actions via (1) del, (2) delbackup, (3) res, or (4) ren actions, and it can be leveraged to perform cross-site scripting (XSS) and possibly other attacks. Connected sources c...

CVE-2007-5816

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page...

CVE-2007-5817: Improper Neutralization of Input During Web Page Generation

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a 1 del, 2 delbackup, 3 res, or 4 ren action. NOTE: this issue can be leveraged to conduct cross-site scripting XSS and possibly other attacks...

CVE-2007-5816: Exposure of Sensitive Information to an Unauthorized Actor

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of the resulting page...

CONTENTCustomizer 3.1 - Dialog.php Information Disclosure

CONTENTCustomizer 3.1 - Dialog.php Information Disclosure source: https://www.securityfocus.com/bid/26291/info CONTENTCustomizer is prone to an information-disclosure vulnerability. An attacker can exploit this issue to access sensitive information that may lead to further attacks...