CVE-2011-3743: Exposure of Sensitive Information to an Unauthorized Actor

Hesk 2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/footer.inc.php and certain other files...

CVE-2006-4838: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 rooturl and 2 dcpversion parameters in a admin/inc/footer.inc.php, and the rooturl, 3 pagetopname, 4 pagename, and 5 pageoptions parameters in b...