CuteNews 0.88 comments.php Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6935/info CuteNews is prone to an issue that may allow remote attackers to include files located on remote servers. Under some circumstances, it is possible for remote attackers to influence the include path for several...

Joomla component com_gcalendar Suite 2.1.5 - Local File Include

No description provided by source. Joomla component GCalendar Suite 2.1.5 Local File Include Version : 2.1.5 Author : jdc Download : http://g4j.laoneo.net/content/extensions/download/docdetails/28-gcalendar-suite-215.html...

Forum Rank System 6 - 'settings['locale']' Parameter Multiple Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to vie...

Indexu 5.0 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17470/info The 'indexu' application is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these...

Mail Manage EX 3.1.8 MMEX Script Settings Parameter Remote PHP File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10457/info Mail Manage EX is reportedly prone to a remote file include vulnerability. This vulnerability results from insufficient sanitization of user-supplied data and may allow remote attackers to include arbitrary PHP...

phpPrintAnalyzer <= 1.2 - Remote File Include Vulnerability

No description provided by source. title: phpPrintAnalyzer Inclusion Vulnerability Author: Cmaster4 batamhacker irc.dal.net script: phpPrintAnalyzer Class : Remote cont@ct: [email protected] Exploit: http://site.com/path/inc/header.inc.php?ficStyle=evilcode Thx to : batamhacker crew on dal.net...

PHPLibrary <= 1.5.3 (grid3.lib.php) Remote File Include Vulnerability

No description provided by source...

MarmaraWeb E-Commerce Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15877/info E-commerce is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

PHORUM 3.x/5.x Common.PHP Remote File Include Vulnerability

No description provided by source...

Web Server Creator Web Portal 0.1 - Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6251/info The Web Server Creator Web Portal is prone to an issue which may allow attackers to include arbitrary files from a remote server. It is possible for remote attackers to influence the include path for the...

Joomla component com_rpx Ulti RPX 2.1.0 - Local File Include

No description provided by source. Joomla component Ulti RPX 2.1.0 Local File Include Version : 2.1.0 Author : jdc Download : http://www.ultijoomla.com/downloads?func=fileinfo&id=33 http://site/index.php?option=comrpx&controller=../../../../../etc/passwd%00 jdc 2010...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

No description provided by source. Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce$wbclassdir/classDatabase.php; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if !...

OpenBiblio 0.x staff_del_confirm.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/27053/info OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local...

Irokez Blog 0.7.3.2 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/33931/info Irokez Blog is prone to multiple input-validation vulnerabilities: - A cross-site scripting issue - An SQL-injection issue - Multiple remote file-include issues Exploiting these issues could allow an attacker t...

DodosMail 2.5 'dodosmail.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30112/info DodosMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local...

vtiger CRM 4.2 - SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HT...

KDPics 1.11/1.16 index.php3 categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit m...

KDPics 1.11/1.16 galeries.inc.php3 categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit m...

phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit

No description provided by source. !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip...

Quick Classifieds 1.0 - controlpannel/createFeatured.php3 DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...