4994 matches found
MyBloggie 2.1.x Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18241/info MyBloggie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include...
WordPress 2.0.5 Functions.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21004/info WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlyi...
Indexu 5.0 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17470/info The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these...
PHP Turbulence 0.0.1 Turbulence.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23580/info PHP Turbulence is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
PHPBB 2.0.x Template.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18255/info The phpBB application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include a...
PHPTreeView 1.0 TreeViewClass.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20764/info PHPTreeview is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
phpBB Fishing Cat Portal Addon - 'functions_portal.php' Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28708/info Fishing Cat Portal Addon for phpBB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the...
DCP-Portal 3.7/4.x/5.x/6.x forums.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
FipsCMS 2.1 PID Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23850/info fipsCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Microsoft Internet Explorer 6.0 MSWebDVD Object Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10056/info It has been reported that Internet Explorer may be prone to a denial of service vulnerability that may allow remote attackers to cause the browser to crash. The issue exists in the 'MSWebDVD' Object. An attacke...
DoceboLMS 2.0.x/3.0.x,DoceboKMS 3.0.3,Docebo CMS 3.0.x Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18109/info Docebo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include an...
BitDefender Antivirus 2008 bdelev.dll ActiveX Control Double Free Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26824/info A BitDefender Antivirus 2008 ActiveX control is prone a double-free vulnerability because of a flaw in the way that the 'bdelev.dll' library handles certain object data prior to returning it. Successfully...
WordPress WP Photo Album Plugin - 'photo' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...
LedNews 0.7 Post Script Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7920/info It has been reported that LedNews does not properly filter input from news posts. Because of this, it may be possible for an attacker to steal authentication cookies or perform other nefarious activities. script...
All In One Control Panel 1.3.x cp_downloads.php did Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/22032/info All In One Control Panel is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
nph-maillist 3.0/3.5 Arbitrary Code Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2563/info nph-maillist is a Perl CGI script that handles mailing lists, typically used to notify interested users of site updates. A hostile user can enter commands embedded in an email address via the subscription form,...
Almond Classifieds Component for Joomla! 7.5 Cross-Site Scripting and SQL-Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/35815/info Almond Classifieds Component for Joomla! is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because the application fails to sufficiently sanitize user-supplied input. A...
PHPMyConferences 8.0.2 Init.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20741/info phpMyConference is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the...
PHP <= 5.2.1 GD Extension WBMP File Integer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23357/info PHP's GD extension is prone to two integer-overflow vulnerabilities because it fails to ensure that integer values aren't overrun. Successfully exploiting these issues allows attackers to crash the affected...
1st Class Mail Server 4.0 1 general.tagz XSS
No description provided by source. source: http://www.securityfocus.com/bid/10089/info Multiple vulnerabilities have been identified in the application that may allow a remote attacker to carry out directory traversal and cross-site scripting attacks. 1st Class Mail Server version 4.01 is reporte...