WeBid Multiple Input Validation Vulnerabilities

WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability and a cross-site-scripting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions migh...

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/44765/info WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability a...

Joomla 1.0.5 com_forme Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Joomla 1.0.5 comforme Multiple Vulnerabilities =============================================== Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software...

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Joomla! Component comforme 1.0.5 - Multiple Vulnerabilities Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/contacts-and-feedback/forms/2265 Version: 1.0.5 Local File Include ------------------...

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/contacts-and-feedback/forms/2265 Version: 1.0.5 Local File Include ------------------ ?option=comforme 〈=../../../../../../../../../etc/passwd%00 SQL...

Zen Cart 'includes/initsystem.php' Local File Include Vulnerability

Zen Cart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

JAF CMS Multiple Remote File Include and Remote Shell Command Execution Vulnerabilities

JAF CMS is prone to an shell-command-execution vulnerability and multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context...

JAF CMS <= 4.0 RC2 Multiple Vulnerabilities

JAF CMS is prone to a shell command execution vulnerability and multiple remote file include vulnerabilities because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

openEngine Local File Include Vulnerability

openEngine is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

TFTgallery 'thumbnailformpost.inc.php' Local File Include Vulnerability

TFTgallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...

eoCMS Local File Include Vulnerability

eoCMS is prone to multiple input-validation vulnerabilities, including: 1. An HTML-injection vulnerability 2. An SQL-injection vulnerability 3. Multiple local file-include vulnerabilities Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise...

TFTgallery <= 0.13.1 'thumbnailformpost.inc.php' LFI Vulnerability - Active Check

TFTgallery is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openEngine <= 2.0 100226 Multiple Vulnerabilities

openEngine is prone to a local file-include vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

NovaBoard 'nova_lang' Local File Include Vulnerability

NovaBoard is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow...

Online Grades Multiple Local File Include Vulnerabilities

Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the...

NovaBoard <= 1.1.4 'nova_lang' LFI Vulnerability

NovaBoard is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Online Grades Multiple <= 3.2.5 LFi Vulnerabilities

Online Grades is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker with admin access can exploit these vulnerabilities to obtain potentially sensitive nformation and to execute arbitrary local scripts in the context of the...

W-Agora 4.1.5 - Local File Inclusion / Cross-Site Scripting

source: https://www.securityfocus.com/bid/44507/info W-Agora is prone to multiple local file-include vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to view and execute local...

w-Agora 'search.php' Local File Include and Cross Site Scripting Vulnerabilities

w-Agora is prone to a local file-include vulnerability and a cross- site scripting vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

W-Agora 'search.php' LFi and XSS Vulnerabilities

w-Agora is prone to a local file-include LFi vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...