CVE-2008-4622

The isLoggedIn function in fastnews-code.php in phpFastNews 1.0.0 allows remote attackers to bypass authentication and gain administrative access by setting the fn-loggedin cookie to 1...

Cross site scripting

Cross-site scripting XSS vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via 1 the fn parameter during a dload action, 2 the mask parameter during a search action, and 3 the tab parameter during a sysinfo...

CVE-2008-4447: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via 1 the fn parameter during a dload action, 2 the mask parameter during a search action, and 3 the tab parameter during a sysinfo...

Sql injection

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action...

CVE-2007-5991

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action...

CVE-2007-5991: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in ExoPHPdesk allows remote attackers to execute arbitrary SQL commands via the user parameter in a profile fn action...

CVE-2006-6139

CVE-2006-6139 is a directory traversal vulnerability in the downloadexcel.php component of Sisfo Kampus 2006 (Semarang 3). It allows remote attackers to read arbitrary files via the fn parameter. This description is supported by NVD/CVE records; exploitation status is not provided in the document...

CVE-2006-6139: Undefined Security Weakness

Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 Semarang 3 allows remote attackers to read arbitrary files via the fn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2002-1698: Undefined Security Weakness

Buffer overflow in Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service crash via a long FN font argument in the message header...

CVE-2005-0479: Undefined Security Weakness

Directory traversal vulnerability in ComGetLogFile.php3 for TrackerCam 5.12 and earlier allows remote attackers to read arbitrary files via ".." sequences and 1 "/" slash, 2 "" backslash, or 3 hex-encoded characters in the fn parameter...

CVE-2005-0481: Undefined Security Weakness

TrackerCam 5.12 and earlier allows remote attackers to read log files via the fn parameter in a direct request to the ComGetLogFile.php3 script...

CVE-2002-0239: Undefined Security Weakness

Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the 1 -fn, 2 -hfb, or 3 -hfn argument...