CVE-2006-2031

Cross-site scripting XSS vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

ecotwo Shopsystem vuln.

ecotwo Shopsystem vuln. Vuln. discovered by : r0t Date: 9 april 2006 vendor:http://www.i-webshop.de/6-0-shopsysteme.html affected versions: 1.0-192 and previous orginal advisory: http://pridels.blogspot.com/2006/04/ecotwo-shopsystem-vuln.html Vuln. description: Input passed to the "lang" paramete...

CVE-2006-1684: Undefined Security Weakness

Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via 1 the lang parameter in news.php and 2 other unspecified vectors...

Directory traversal

Directory traversal vulnerability in scanlanginsert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter...

CVE-2006-0976: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scanlanginsert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter...

CVE-2006-0872: Undefined Security Weakness

Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the lang parameter...

coppermine -- File Inclusion Vulnerabilities

Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people and by malicious users to compromise a vulnerable system. 1 Input passed to the "lang" parameter in include/init.inc.php isn't properly verified, before it is used to include files. This can...

HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access

The remote host appears to be running HP Systems Insight Manager SIM, a unified infrastructure management tool. The version of HP SIM on the remote host includes a version of the search engine Namazu that reportedly fails to validate user input to the 'lang' parameter of the 'namazucgi' script. A...

CVE-2006-0518

Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-0518

Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-0518

CVE-2006-0518 is an XSS vulnerability in SPIP’s index.php3 that allows remote attackers to inject arbitrary script or HTML via the lang parameter. Affected software includes SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier. Related OpenVAS entries describe SPIP

CVE-2006-0518

Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-0518: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 5539 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2005-4557: Undefined Security Weakness

dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...

VulnCheck KEV: CVE-2005-4557

dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte %00 in the lang parameter, possibly due to a directory traversal vulnerability...

CVE-2005-3876: Undefined Security Weakness

Multiple SQL injection vulnerabilities in adcbrowres.php in AD Center ADC2000 NG Pro 1.2 and NG Pro Lite allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 lang parameters...

CVE-2005-2162: Undefined Security Weakness

PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitrary PHP code via the lang parameter...

CVE-2005-1998: Undefined Security Weakness

Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the lang parameter...

CVE-2005-0908: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to index.php or 2 the searchTopCategoryID parameter to searchresult.php...

CVE-2005-0908

Multiple cross-site scripting XSS vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the lang parameter to index.php or 2 the searchTopCategoryID parameter to searchresult.php...