Lucene search
+L

176 matches found

Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.236 views

dotProject 2.0 - '/modules/projects/vw_files.php?dPconfig[root_dir]' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

5.6CVSS5.8AI score0.07846EPSS
SaveExploits11
Packet Storm
Packet Storm
added 2006/02/14 12:0 a.m.44 views

dotProject-2.0.1.txt

dotproject Date: Feb. 14 2006 Vendor: dotproject.net contacted Description: dotProject is a volunteer supported Project Management application. Details: The 'protection.php' script does not properly validate user-supplied input in the 'siteurl' parameter. Some user-supplied input is not checked...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.21 views

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion

dotProject 2.0 - modulestasksgantt.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker...

7.5AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.20 views

dotProject 2.0 - modulespublicdate_format.php?baseDir Remote File Inclusion

dotProject 2.0 - modulespublicdateformat.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

7.5AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.35 views

dotProject 2.0 - modulesprojectsgantt2.php?dPconfig[root_dir] Remote File Inclusion

dotProject 2.0 - modulesprojectsgantt2.php?dPconfigrootdir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.46 views

dotProject 2.0 - '/modules/public/date_format.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

5.6CVSS5.8AI score0.07846EPSS
SaveExploits11
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.75 views

dotProject 2.0 - '/modules/tasks/gantt.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

5.6CVSS5.8AI score0.07846EPSS
SaveExploits11
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.37 views

dotProject 2.0 - '/modules/public/calendar.php?baseDir' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

5.6CVSS5.8AI score0.07846EPSS
SaveExploits11
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.21 views

dotProject 2.0 - modulesadminvw_usr_roles.php?baseDir Remote File Inclusion

dotProject 2.0 - modulesadminvwusrroles.php?baseDir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An...

7.5AI score
SaveExploits0
exploitpack
exploitpack
added 2006/02/14 12:0 a.m.22 views

dotProject 2.0 - modulesprojectsgantt.php?dPconfig[root_dir] Remote File Inclusion

dotProject 2.0 - modulesprojectsgantt.php?dPconfigrootdir Remote File Inclusion source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/02/14 12:0 a.m.101 views

dotProject 2.0 - '/modules/projects/gantt2.php?dPconfig[root_dir]' Remote File Inclusion

source: https://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...

5.6CVSS5.8AI score0.07846EPSS
SaveExploits11
NVD
NVD
added 2003/04/11 4:0 a.m.18 views

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

10CVSS6.9AI score0.0551EPSS
SaveExploits2References3
CVE
CVE
added 2003/03/18 5:0 a.m.53 views

CVE-2002-1428

CVE-2002-1428 affects dotProject 0.2.1.5 (index.php). The vulnerability allows remote attackers to bypass authentication by manipulating a cookie or the URL parameter user_cookie set to 1, enabling unauthorized access to protected areas. The documents do not provide exploit details, affected vers...

10CVSS7.3AI score0.0551EPSS
SaveExploits2References3Affected Software1
Cvelist
Cvelist
added 2003/03/18 5:0 a.m.28 views

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the usercookie parameter set to 1...

6.9AI score0.0551EPSS
SaveExploits2References3
securityvulns
securityvulns
added 2003/01/28 12:0 a.m.52 views

dotproject Remote File Access Vulnerability

dotproject Remote File Access Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.dotproject.net Vendor : informed Mailed advisory: 26/01/02 Vender Response : None ----------------------...

0.1AI score
SaveExploits0
securityvulns
securityvulns
added 2002/07/31 12:0 a.m.40 views

php dotProject by pass authentication

SCAN Associates Sdn Bhd Security Advisory Product: dotProject 0.2.1.5 possibly other Vendor URL: http://www.dotmarketing.org/dotproject/ Summary: php dotProject by pass authentication Author: pokleyzz [email protected], sk [email protected], shaharil [email protected]...

0.3AI score
SaveExploits0
Rows per page
Query Builder