Lucene search
K

176 matches found

Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.74 views

dotProject 2.0 - '/modules/projects/gantt.php?dPconfig[root_dir]' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.36 views

dotProject 2.0 - '/includes/session.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.232 views

dotProject 2.0 - '/modules/projects/vw_files.php?dPconfig[root_dir]' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.18 views

dotProject 2.0 - modulesadminvw_usr_roles.php?baseDir Remote File Inclusion

dotProject 2.0 - modulesadminvwusrroles.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

7.5AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.14 views

dotProject 2.0 - includessession.php?baseDir Remote File Inclusion

dotProject 2.0 - includessession.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker c...

7.5AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.18 views

dotProject 2.0 - modulesprojectsgantt.php?dPconfig[root_dir] Remote File Inclusion

dotProject 2.0 - modulesprojectsgantt.php?dPconfigrootdir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...

7.5AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.43 views

dotProject 2.0 - '/modules/public/date_format.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.16 views

dotProject 2.0 - modulespublicdate_format.php?baseDir Remote File Inclusion

dotProject 2.0 - modulespublicdateformat.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

7.5AI score
Exploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.17 views

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

7.5AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.70 views

dotProject 2.0 - '/modules/tasks/gantt.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.36 views

dotProject 2.0 - '/includes/db_connect.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

7.4AI score
Exploits0
NVD
NVD
added 2003/04/11 4:0 a.m.13 views

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

10CVSS6.9AI score0.05308EPSS
Exploits1References3
CVE
CVE
added 2003/03/18 5:0 a.m.47 views

CVE-2002-1428

CVE-2002-1428 affects dotProject 0.2.1.5 (index.php). The vulnerability allows remote attackers to bypass authentication by manipulating a cookie or the URL parameter user_cookie set to 1, enabling unauthorized access to protected areas. The documents do not provide exploit details, affected vers...

10CVSS7.3AI score0.05308EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2003/03/18 5:0 a.m.16 views

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

6.9AI score0.05308EPSS
Exploits1References3
securityvulns
securityvulns
added 2003/01/28 12:0 a.m.41 views

dotproject Remote File Access Vulnerability

dotproject Remote File Access Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.dotproject.net Vendor : informed Mailed advisory: 26/01/02 Vender Response : None ----------------------...

0.1AI score
Exploits0
securityvulns
securityvulns
added 2002/07/31 12:0 a.m.36 views

php dotProject by pass authentication

SCAN Associates Sdn Bhd Security Advisory Product: dotProject 0.2.1.5 possibly other Vendor URL: http://www.dotmarketing.org/dotproject/ Summary: php dotProject by pass authentication Author: pokleyzz [email protected], sk [email protected], shaharil [email protected]...

0.3AI score
Exploits0
Rows per page
Query Builder