EUVD-2008-5309

Malware in sbrugna...

PT-2021-8825 · Sap · Sap J2Ee Engine

Name of the Vulnerable Software and Affected Versions: SAP J2EE Engine/7.01/Portal/EPP version 7.01 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script via the wsdlLib parameter to "/ctcprotocol/Protocol". This issue only affects products that are ...

CVE-2014-3719: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

Pie Web M{a,e}sher 0.5.3 - Multiple Remote File Inclusion Vulnerability

No description provided by source. =========================================================================================== o Pie Web Ma,esher 0.5.3 Multiple Remote File Inclusion Vulnerability Software : Pie Web Ma,esher version 0.5.3 Vendor : http://pie.ekkaia.org/ Download :...

CVE-2008-7073: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in lib/action/rss.php in RSS module 0.1 for Pie Web Ma,esher, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lib parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

CVE-2008-5332

Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lib parameter to files in lib/action/ including a alias.php, b cancel.php, c context.php, d deadlinks.php, e delete.php, and others; and the 2...

CVE-2007-3228: Undefined Security Weakness

PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUMLIB parameter. NOTE: by default, access to the PhpDocumentor directory tree...

CVE-2006-5250: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/googlesearch/GoogleSearch.php in BlueShoes 4.6public and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APPpathlib parameter, a different vector than CVE-2006-2864...

CVE-2005-4593

PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary code via a URL in the 1 FORUMLIB parameter in Documentation/tests/bug-559668.php and 2 the rootdir parameter in docbuilder/filedialog.php...