CVE-2016-10984

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

CVE-2016-10984

The EchoSign plugin for WordPress (pre-1.2) is affected by a reflected XSS via the inc.php page parameter. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE lists, WPVulnDB) noting the plugin version constraint and the XSS vector. No exploit or workaround details are pro...

CVE-2016-10984: Improper Neutralization of Input During Web Page Generation

The echosign plugin before 1.2 for WordPress has XSS via the inc.php page parameter...

PT-2019-7777

Name of the Vulnerable Software and Affected Versions echosign plugin for WordPress versions prior to 1.2 Description The issue concerns a problem with the echosign plugin, where there is a possibility of XSS Cross-Site Scripting attack. This attack can occur via the "page" parameter in the inc.p...

PT-2019-12292

Name of the Vulnerable Software and Affected Versions FusionPBX version 4.4.3 Description The issue is related to excessive debug information in the Operator Panel module, specifically in the app/operator panel/index inc.php file. This allows authenticated administrative attackers to obtain...

JTBC (PHP) Access Control Error Vulnerability

JTBC PHP is a PHP-based open source content management system CMS. cache management module is one of the cache management module . An access control error vulnerability exists in the cache management module in JTBC PHP version 3.0.1.8. An attacker can exploit this vulnerability to delete any file...

PT-2017-12329

Name of the Vulnerable Software and Affected Versions OpenEMR versions 5.0.0 and prior Description The issue allows attackers to bypass intended access restrictions. This is achieved via a crafted name in the csv log html function, located in the library/edihistory/edih csv inc.php file...

CVE-2014-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Oliver formerly Webshare 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the 1 login page index.php or 2 login form loginform-inc.php...

In-link <= 2.3.4 (ADODB_DIR) Remote File Include Vulnerabilities

No description provided by source. ================================================================= in-link =2.3.4 adodb-postgres7.inc.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous By Saudi Hackrz...

CVE-2011-3765: Exposure of Sensitive Information to an Unauthorized Actor

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

PT-2011-4655

Name of the Vulnerable Software and Affected Versions Open-Realty version 2.5.8 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as install/versions/upgrade 115.inc.php, which...

PT-2011-4645

Name of the Vulnerable Software and Affected Versions MantisBT version 1.2.4 Description The issue allows remote attackers to obtain sensitive information via a direct request to certain .php files. This is demonstrated by files such as view all inc.php, which reveals the installation path in an...

PT-2011-1344

Name of the Vulnerable Software and Affected Versions ea gBook versions 0.1 through 0.1.4 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the inc ordner parameter. This is a result of a PHP remote file inclusion vulnerability in the index inc.php file...

Family Connection 1.8.2 SQL Injection

Salvatore "drosophila" Fresta + Application: Family Connection + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...

CVE-2008-2986: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpDMCA 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the ourlinuxrootpath parameter to 1 adodb-errorpear.inc.php and 2 adodb-pear.inc.php in adodb/...

CVE-2006-6043: Undefined Security Weakness

PHP file inclusion vulnerability in loginform-inc.php in Oliver formerly Webshare 1.2.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the confmotdfile parameter, which is accessed by the...

CVE-2006-4618

PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as used in Intechnic In-link 2.3.4, allows remote attackers to execute arbitrary PHP code via a URL in the ADODBDIR parameter...

inlink234.txt

================================================================= in-link =2.3.4 adodb-postgres7.inc.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous By Saudi Hackrz http://www.in-portal.net/...

CVE-2006-4618

CVE-2006-4618 : PHP remote file inclusion in the ADODB PostgreSQL integration (adodb-postgres7.inc.php) within John Lim ADOdb, potentially affected versions ≤ 4.01, used by Intechnic In-link 2.3.4. An attacker can supply a URL via the ADODB_DIR parameter to execute arbitrary PHP code on the serve...

In-link 2.3.4 - ADODB_DIR Remote File Inclusion

In-link 2.3.4 - ADODBDIR Remote File Inclusion ================================================================= in-link =2.3.4 adodb-postgres7.inc.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous By Saudi Hackrz...